ShadowPermit

ShadowPermit is a web app (with optional browser extension) that helps small and mid-sized businesses control who connects what to their company data. It continuously discovers OAuth and API-based app connections across Google Workspace and Microsoft 365, flags high-risk scopes (read mail, drive access, admin privileges), and routes access requests through lightweight approval workflows. Instead of pretending to be a full IAM suite, it focuses on the messy reality: employees connect random tools for productivity and nobody tracks it. Admins get a clear inventory, risk scoring, and one-click revocation for suspicious tokens. Employees get a simple request-and-approve flow that doesn’t feel like IT gatekeeping. It’s a traditional app with AI-assisted risk explanations (e.g., “this scope can exfiltrate all files”) and anomaly summaries, but it doesn’t rely on AI for core security decisions.