cybee

Menu

Start freeDeutsch

Swiss. Independent. Privacy first.

The trial ended.
Does the app still have access?

A reporting app was connected for one client project. Nobody uses the reports now. Nobody remembers reviewing its access either.

See app grants in your connected Google Workspace. Find the ones nobody can explain, identify who uses them and review what still belongs there.

Review one app grant

Illustrative example · invented data

The reporting app
outlived the project.

Google Workspace[email protected]
Access granted
Campaign ReportsInvented app · project finished
Does a grant mean the app is still using it?

The grant shows that access was authorised through this account. It does not tell you when the app last used it. Ask the account holder which work it supports before deciding what should remain.

Follow the permission
back to its purpose.

  1. See the grant

    Start with the app and the company account that authorised it. Read the listed permissions.

  2. Ask the owner

    Which project needed it? Is someone still relying on it? A strange name alone is not evidence of a problem.

  3. Review what remains

    If the project ended, have the administrator review the permission in the relevant service. Record the decision and follow-up.

This is useful for forgotten reporting tools and AI apps connected to work accounts. It is a Workspace review, not a scan of every account or API key the team has ever used.

Put the account
beside the Mac.

09:40Workspace account event
09:42Mac security alert

Illustrative timestamps. A connection between these events is not established.

Workspace provides sign-ins, third-party app grants, Drive downloads and administrator changes. Together with Mac alerts, these facts can help you ask a more specific question. Two events close together are a reason to investigate, not proof of a cause.

See the Workspace coverage

Keep the account answer
ready for the next review.

Connecting Workspace and viewing accounts is free. The paid plan adds sealed accounts records and offboarding evidence. Use them separately from the Mac Trust Passport when a client asks about company access.

Coverage is the connected Workspace organisation. It excludes email and document contents, personal Google accounts, organisations you have not connected and unrelated services. App visibility does not promise one-click removal everywhere.

A few practical questions.

Can we also handle someone leaving?
Yes. Connected Workspace supports a confirmed offboarding action. Review client services and keys separately; company account removal does not erase existing file copies.

Start with one
forgotten app.

Set up your assistant, connect Workspace and ask who still needs the access.

Free protection and email support. Paid plans include automated hardening, sealed records and 24/7 chat support.

Start in your Chat · CLI · IDE · TerminalmacOS
curl -sSf https://get.cybee.dev | sh

After setup: /cybee in your connected assistant.

Chat · CLI · IDE · Terminal. Install on each supported Mac; connect your assistant using the guide. Copying this command installs nothing.

Read the installation guide