What the posture rules check

Posture Guard runs a deterministic ruleset over the normalized permissions from every connected source. Each rule is explainable — the finding states exactly what it saw and why it matters.

Examples of what it catches

• Public link share — a resource shared by link to anyone (High; Critical if the data is sensitive).
• Public + web-discoverable — shared publicly *and* indexable, so it can be found, not just opened.
• Public link with edit/owner access — anyone with the link can change or take over the resource (Critical).
• External access to sensitive data — someone outside your org can reach classified data (High; Critical on write access).
• External collaborator with edit access and external principal holds ownership — outsiders who can modify or own resources.

Sensitivity is inferred from naming and content signals, which is why the same share can be ranked differently depending on the data behind it. Every finding includes the resource, the principals involved, and a plain-language reason you can hand to an auditor.