Data Security Practices

Sharing audits miss it entirely: every OAuth token your team has ever granted still works. Here is how to review Google Drive third-party app access, what to flag, and how to make it a standing check.

I pointed my own Drive auditing tool at my own Drive and found 204 publicly-linked files, including my 2014 tax returns. Here's the free manual audit any signed-in user can run without an admin console, and the four gaps it can't close.

Most build-in-public posts show the wins. These are the three that stopped me cold: a scan that kept restarting from zero, a stale-file check that dated everyone's photos to 1980, and an accessibility pass I had to learn from scratch.

The launch was set for July 15 — until Google verification, a stuck deploy, and an iOS snag all hit at once. Here's why it slipped, and why I'm okay with it.

When a compliance audit lands, the scramble is always the same: no one can quickly show who has access to sensitive files, how long data lingers, or what happens when someone leaves. Here's how to audit your Google Drive sharing permissions before an assessor does — and turn a stressful scramble into a routine check.

The honest version of six months building a Google Drive security tool: OAuth approval, CASA Tier 2 security assessment, accessibility compliance, and what it actually takes to ship something you can stand behind.

That 'Anyone with the link' setting on your Google Drive files could be exposing sensitive data to the entire internet. Here's what you need to know.