Material Security 's Staff Threat Research Engineer Belem Regalado dug into OAuth governance across 159 organizations and found three fixes requiring no new tooling.
Public source
Publisher name
Public post
Belem Regalado, our Staff Threat Research Engineer, dug into OAuth governance across 159 organizations. Three fixes came out of it, and none of them require a new tool.…
Company
Material Security
Unified detection and response for Google Workspace and Microsoft 365
- Industry
- Computer and Network Security
- Location
- San Francisco, US
- Company size
- 51–200 employees
About Material Security
Material Security is an automated detection and response toolkit for Google Workspace and Microsoft 365, combining email security, data security, identity protection, and configuration management in a single platform.
See moreLatest activity
Latest activity from Material Security
7 signals
Customers & Market
Material Security found the ChatGPT Google Workspace connector authorized across 20 enterprise environments with more than 4,000 accounts holding active grants.
Partnerships
Material Security secured the workspace for OpenAI, xAI, and Anthropic frontier labs.
Products & Services
Material Security built an open standard MCP server that allows agents to call Material's detection and remediation tools directly through a JSON-RPC server on top of an existing authentication, permissions, and rate-limiting infrastructure.
Discover more
Similar signals
Similar public activity from other companies.
Research & Knowledge
Nudge Security
Nudge Security reported that employees average 88 OAuth grants each, resulting in 88,000 standing app-to-app connections for a 1,000-person company most authorized in two clicks with zero review.
Research & Knowledge
Reach Security
Reach Security is leading the industry in understanding the scale and impact of security control drift.
Research & Knowledge
Cyera
Cyera and Oasis Security ran research on 2.4 million workers and 3.6 billion permissions.
Research & Knowledge
SpyCloud
SpyCloud Labs published an article titled 'Hear more about device code phishing from Aurora from SpyCloud Labs' on SpyCloud's blog.
Research & Knowledge
Google Cloud Security