Cloud File Sharing Check – Microsoft 365 and Google Workspace Exposure Scan

"Anyone with the link" is a decision someone made once, three years ago, about a file that still exists.

The Cloud File Sharing Check inventories how your organisation's cloud files are actually shared — not how you assume they are shared — and surfaces the links, guests and permissions that have quietly outlived their purpose.

What it checks

• Files and folders shared with "anyone with the link", including ones no longer accessed by anyone inside the business
• External guest accounts with standing access to your content
• Sharing that survived a staff departure or a finished project
• Tenant-wide sharing defaults, and whether they permit more than you intended
• Where sensitive-looking content and permissive sharing overlap

Before you buy — what this one needs from you

Unlike the rest of the QuickScan line, this product reads from your cloud tenant, so it needs a credential you create and control:

• You must be a global or equivalent administrator of the Microsoft 365 or Google Workspace tenant.
• You will register a read-only application in your own tenant and paste its secret into a masked prompt. The secret stays on your machine and is never transmitted to us.
• Because it needs that secret, this product is sold on its own and is deliberately excluded from every QuickScan bundle — no bundle can supply it, and a bundle that silently skipped it would be worse than no scan at all.
• Setup instructions are included and written step by step.

What you get

• A written PDF report emailed back to you, typically within one business day.
• Every exposure rated Critical / High / Medium / Low, with the file or folder named.
• A prioritised revocation list — what to unshare first.
• Recommended tenant-level settings so the same drift does not happen again.
• Reporting built to CompTIA Security+ and PenTest+ practice standards.

Who it's for

Businesses running on Microsoft 365 or Google Workspace that have shared files with clients, contractors and former staff and have never gone back to look.

Requirements

• Windows 10 or Windows 11
• Run as administrator
• Administrator access to your own Microsoft 365 or Google Workspace tenant
• About 30 minutes including the one-time app registration

What this is not

QuickScan is detection and advisory only. It reads sharing metadata; it does not read, copy or transmit the contents of your files, never exploits a weakness, and changes no permission on your tenant. It is not a certification, an audit or an attestation.

One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.