When someone clicks "Allow" on a connected app, that app gets its own access. It keeps working after the person changes their password, which is why attackers like it: a malicious app consent survives a password reset.
Over-powered AI apps rely on the same mechanism. A note-taking or writing tool may ask for far more access than its job needs.
What to review
- Apps with access to all mailboxes or all files
- Apps nobody recognises, or that only one person uses
- Consents granted right after an unusual sign-in
How Centeye handles it
Centeye Gatewatch flags risky app consent, and Centeye Lumen shows which AI apps hold access and what they can reach.
Gatewatch: identity protection (ITDR) →