Context: we are an entertainment shop with about 7,000 employees, all-in on Microsoft 365, SharePoint, OneDrive and Teams. What sold me was speed to truth. Other tools demo well. DoControl had our full Microsoft 365 exposure mapped before the proof of concept call ended. The numbers were worse than we assumed, by a lot. Review collected by and hosted on G2.com.

Workflow versioning is thin. For us, we clone before we change anything live. Review collected by and hosted on G2.com.

Within three days of connecting Microsoft 365, SharePoint, OneDrive, and Teams, DoControl surfaced exposure we’d been guessing about for years. Now the guessing is over. Fair trade. Review collected by and hosted on G2.com.

In our case, the OAuth risk scoring can feel like a black box at times. I can see the inputs, but I don’t always understand the reasoning behind the different scores between two similar apps. Review collected by and hosted on G2.com.

The depth of Google Workspace is real, and the deployment was fast credit where it’s due. I honestly didn’t expect that. Review collected by and hosted on G2.com.

The platform seemed to assume a level of maturity and budget that we simply don’t have. For our six-person team, it felt like too much product and too much money. Review collected by and hosted on G2.com.

The Google Workspace side really impressed me. Beyond that, though, everything we needed was either out of scope or outside our budget. Review collected by and hosted on G2.com.

Deployment was fast, but the alert noise in the first month burned real analyst time. Also, the connectors for two of our core apps never reached the depth we were shown for Google. Review collected by and hosted on G2.com.

What I like most is being able to fix our history instead of just watching it. We cleaned up 12,530 overshared assets in Microsoft 365 with only a few clicks, and then set up scheduled workflows so it doesn’t pile up again. Review collected by and hosted on G2.com.

In practice, the mobile experience is essentially read-only. It’s honestly fine for quick triage, but not really suitable for admin work. Review collected by and hosted on G2.com.

The one-click mass cleanup. We remediated close to 4,220 assets in our first month. With our old tool, we only had visibility, no action. We made the switch because we wanted to actually get rid of the risks after seeing them. Review collected by and hosted on G2.com.

Gsuite gets the detailedest treatment; smaller tools get less. Coverage outside the core applications is thinner. Review collected by and hosted on G2.com.

Within one afternoon of hooking up Google Workspace, Zoom and Slack, DoControl showed us exposure we had been guessing at for years. Guessing is over. The free assessment alone justified the meeting. Review collected by and hosted on G2.com.

A proper simulation mode, showing last month’s exact file impact, is my top feature request. The preview is useful and still not enough. Review collected by and hosted on G2.com.

Honestly, the Slack bot and the bulk cleanup delivered. Honestly, the rest of the value case depends on how Google-first you are. We are not. Review collected by and hosted on G2.com.

For us, the price is hard to justify at our size, and the reporting gaps mean I still do manual work every month. Honestly, bulk actions make me careful every time. Honestly, an undo for bulk remediation would calm me down. Review collected by and hosted on G2.com.

We’re an airline/aviation shop with about 350 employees, and we’re all-in on Microsoft 365, SharePoint, OneDrive, and Teams. Within three days of connecting Microsoft 365, SharePoint, OneDrive, and Teams, DoControl surfaced exposure we’d been guessing at for years. The guessing is over. The numbers were a lot worse than we assumed. Review collected by and hosted on G2.com.

The first month of anomaly detection required some real tuning. Real talk: we got pinged for legitimate bulk projects before it learned our rhythms. Review collected by and hosted on G2.com.

Our entire company runs on Google Workspace and Slack, and DoControl supports both as if it were built specifically for them. It delivers DLP with real context. The old approach to DLP is basically scanning for credit card and Social Security numbers, then getting buried in false positives. DoControl adds the missing layers: who the person is, what team they’re on, whether they’re about to leave, and who the recipient is. As a result, our alert volume dropped, and the alerts that still come through are actually worth reading.

The Slack bot that prompts employees to explain a share or undo it is the feature my team mentions most. At this point, about half of our incidents get resolved without even needing a ticket. Review collected by and hosted on G2.com.

Coverage beyond the core apps feels thinner. For example, our Salesforce instance doesn’t get the same depth of coverage that our Drive environment does. I’d also like to see more out-of-the-box compliance frameworks mapped to the misconfiguration checks, although to be fair, they do keep adding more over time. Review collected by and hosted on G2.com.