Drive Security

Sharing audits miss it entirely: every OAuth token your team has ever granted still works. Here is how to review Google Drive third-party app access, what to flag, and how to make it a standing check.

I pointed my own Drive auditing tool at my own Drive and found 204 publicly-linked files, including my 2014 tax returns. Here's the free manual audit any signed-in user can run without an admin console, and the four gaps it can't close.

When a compliance audit lands, the scramble is always the same: no one can quickly show who has access to sensitive files, how long data lingers, or what happens when someone leaves. Here's how to audit your Google Drive sharing permissions before an assessor does — and turn a stressful scramble into a routine check.

That 'Anyone with the link' setting on your Google Drive files could be exposing sensitive data to the entire internet. Here's what you need to know.