G2

Benjamin P.

CISO

Financial Services

Enterprise (> 1000 emp.)

8/18/2026

"Turned Our Theoretical Attack Surface Into a Clear, Actionable Risk List"

5/5

What do you like best about CloudEagle?

It gave us a number we could actually reduce. Before this, our attack-surface conversations were mostly theoretical. We knew there were OAuth grants, dormant accounts, and unsanctioned apps out there; we just couldn’t quantify any of it. The first full scan pulled together every connected app, every token, every account that didn’t map to an active employee, and every app with a weak security posture score. All of a sudden, we had a clear list ranked by risk, plus a practical way to work it down week by week. Review collected by and hosted on G2.com.

What do you dislike about CloudEagle?

Funny enough, my only complaint is that I want more of what they’re already best at. The direct integrations are so good that now I find myself wishing there were one for every tool we use, even the obscure regional vendors that nobody else seems to integrate with. To be fair, they keep adding more, and there’s a universal connector that helps cover the gaps, so this is really just a temporary gripe at best. Review collected by and hosted on G2.com.

What problems is CloudEagle solving and how is that benefiting you?

Honestly, our standing access problem was worse than I expected. We uncovered admin rights that had been granted to projects that ended over a year ago, service accounts that nobody owned, and a handful of third-party apps with token access to our environment that we’d simply stopped paying attention to. Over the first quarter, we revoked hundreds of grants and meaningfully reduced our privileged account count. Now, when the board asks what we’re doing about attack surface, I can point to a trend line instead of a shrug. Review collected by and hosted on G2.com.