RoleRadar

RoleRadar is a web app (with optional lightweight desktop agent) that continuously detects “access creep” and toxic permission combinations across SaaS and cloud tools. Instead of trying to replace your IAM, it plugs into what you already use (Okta/Azure AD, Google Workspace, Slack, GitHub, AWS) and builds a living map of who can do what, where, and why. It flags risky outliers (e.g., a contractor with admin + finance access), stale accounts, and role drift after org changes. Managers get simple, time-boxed access review tasks with one-click approve/revoke and an audit-ready trail. An AI layer summarizes risk in plain language and suggests least-privilege role templates, but humans stay in control. This is realistic for SMB/mid-market teams that can’t afford full-blown IGA suites yet still face compliance pressure and breach risk.