我们扫描的内容
- API-key inventories (admin + per-project): names, scope, created / last-used — never credentials (values are redacted by OpenAI)
- Organization members, roles, and projects
- Audit-log events (optional — opt-in on OpenAI’s side; a finding tells you if it is off)
只读监控——除非您开启自动修复并单独授予写入权限，否则您的 OpenAI 数据中的任何内容都不会发生变更。
安全发现
每次 OpenAI 扫描会运行 6 条检测规则。每条发现都附带通俗易懂的说明、支撑证据以及修复步骤。
- HIGHOver permission
OpenAI API key is org-wide (not workspace-scoped)
- HIGHStale access
OpenAI API key outlives its departed creator
- HIGHOver permission
OpenAI org-wide API key held by a non-admin member
- MEDIUMStale access
OpenAI API key unused for 90+ days
- MEDIUMMisconfig
OpenAI organization has too many admins
- MEDIUMMisconfig
OpenAI audit logging is not enabled
如何连接 OpenAI
第 1 步
注册或登录 8200.dev
第 2 步
前往 连接器 → OpenAI
第 3 步
点击 连接 并通过 OpenAI 的授权页面进行授权
第 4 步
8200.dev 自动扫描——数分钟内即可看到结果
几分钟内接入您的第一个数据源——免费、只读，无需销售沟通。