I filtered for every file that had been shared with personal Gmail accounts, selected them all, and revoked access. Just like that, about 5,040 exposures were gone before lunch.

Asset inventory that covers users, files, external users, OAuth apps—everything. I was able to get it all within a week, and there were no agents to install.

Some background: we’re roughly 2,500 employees at an insurance company, and most of our data lives in Google Workspace, Slack, and Salesforce. We assumed our sharing hygiene was pretty decent, but DoControl’s initial scan showed otherwise—around 10,000 files were shared outside the company, with some of those shares untouched since 2019. We even found files still being shared by employees who left in 2019, and those links were still live. That was honestly the wow moment. You connect Google Workspace and, about an hour later, you’re looking at every overshared file across the company, sortable by owner, department, and sensitivity.