Data sharing & exposure security checks across 21 apps

External sharing, public links, guest access, retention and data-protection settings that quietly push company data outside the tenant.

Why it matters

Public links, anyone-with-the-link defaults and guest access push company data outside the tenant without anyone deciding to. These are the findings that turn into GDPR breach notifications, because the exposure is silent until someone outside the company finds the file.

Browse by app

• Google Workspace 36 checks
• Microsoft 365 22 checks
• Box 12 checks
• OpenRouter AI 9 checks
• Discord 8 checks
• Sentry 7 checks
• Notion 7 checks
• Snowflake 6 checks
• Vercel 6 checks
• Atlassian 6 checks
• Shopify 6 checks
• GitLab 5 checks
• Dropbox 5 checks
• Anthropic 4 checks
• Microsoft Teams 4 checks
• Amazon Bedrock 4 checks
• incident.io 3 checks
• Datadog 3 checks
• Grafana 3 checks
• n8n 3 checks
• Dust AI 3 checks

Highest-severity checks

The 8 most severe Data sharing & exposure checks across all 21 apps — each links to the connector page where the setting, its remediation and its framework mapping are documented.

1. Drive External Sharing Enabled — Google Workspace severity: critical
2. Drive File Public Sharing — Google Workspace severity: critical
3. Drive File Publicly Indexed — Google Workspace severity: critical
4. Drive Link Sharing Anyone — Google Workspace severity: critical
5. Bidirectional Collaboration Whitelist — Box severity: high
6. Confluence Space Anonymous Access — Atlassian severity: high
7. Copilot Agent Tenant-Wide Sharing — Microsoft 365 severity: high
8. Dashboard Public Sharing — Datadog severity: high

Where to start

Connect Google Workspace first — it carries the most Data sharing & exposure checks in the catalog(setup guide, read-only access). A first scan takes about 15 minutes and reports every failing check on this page with its remediation steps.

All topics · Browse by app