Google Workspace

Выявленные угрозы безопасности

При каждом сканировании Google Workspace выполняется 35 правил обнаружения. Каждая находка сопровождается понятным объяснением, лежащими в её основе доказательствами и шагами по устранению.

• CRITICALPublic exposure

  Public link with edit/owner access

• CRITICALExternal access

  External principal holds ownership

• CRITICALShadow it

  Unvetted app with full Drive/mailbox or admin scopes

• CRITICALAI agent

  Agentic AI platform holds delegated workspace access

• CRITICALAI built app

  AI-built app can access customer PII

• HIGHPublic exposure

  Public link share (link-only)

• HIGHPublic exposure

  Public + web-discoverable share

• HIGHExternal access

  External access to sensitive data

• HIGHExternal access

  External collaborator with edit access

• HIGHOver permission

  Sensitive resource editable org-wide

• HIGHOver permission

  Broad group access to sensitive data

• HIGHAI agent

  Service account with broad write access

• HIGHAI agent

  AI agent with access to sensitive data

• HIGHAI agent

  AI agent with edit/owner access

• HIGHExternal access

  Access granted to a look-alike (typosquat) domain

• HIGHShared drive

  External member on a Shared Drive

• HIGHShared drive

  Anyone-with-the-link file inside a Shared Drive

• HIGHShared drive

  Shared Drive has no Manager (orphaned)

• HIGHShadow it

  Shadow-AI tool (ungovernable AI vendor) connected to the workspace

• HIGHShadow it

  Unknown app can send email as your users

• HIGHAI built app

  AI-built app holds broad data scopes

• HIGHAI built app

  AI-built app has no documented data-retention policy

• MEDIUMOver permission

  Broad org-wide edit access (aggregate)

• MEDIUMOver permission

  Resource with multiple owners

• MEDIUMStale access

  Stale external read access

• MEDIUMStale access

  Dormant privileged internal account

• MEDIUMMisconfig

  Direct share breaks folder inheritance

• MEDIUMShared drive

  Shared Drive allows external sharing

• MEDIUMShared drive

  Shared Drive with excessive membership

• MEDIUMShared drive

  Stale Shared Drive (no recent activity)

• MEDIUMShadow it

  App authorized by a single user with broad scopes

• MEDIUMAI built app

  Unverified recently-created app with broad scopes

• MEDIUMMisconfig

  Vendor AI-training data-contribution posture

• LOWShared drive

  Shared Drive's sharing restrictions could not be read

• LOWShadow it

  Stale app authorization unused for 90+ days