Resources
Practical guides to seeing — and tightening — who and what can access your Google Workspace and Microsoft 365.
Using an access audit to answer your cyber-insurance questionnaire
Cyber-insurance applications now ask detailed access-control questions. Here's how a Google Workspace / Microsoft 365 access audit gives you evidence-backed answers.
Finding admin accounts without MFA in Microsoft 365
Privileged accounts without multi-factor authentication are the single biggest breach lever in Microsoft 365. Here's how to find the gaps — including the ones Conditional Access misses.
Risky OAuth scopes, explained
What OAuth scopes are, which ones are dangerous, and how to tell whether a connected app in Google Workspace or Microsoft 365 has more access than it needs.
How to find the third-party apps with access to your Microsoft 365
A practical guide to finding every enterprise app, OAuth grant, and service principal with access to your Microsoft 365 / Entra ID tenant — and spotting the risky ones.
How to find the third-party apps with access to your Google Workspace
A practical guide to finding every third-party app, OAuth token, and connected service with access to your Google Workspace — and spotting the risky ones.