DoControl - SaaS Security Platform

What do you like best about the product?

Within 48 hours of connecting Microsoft 365, OneDrive, and Teams, DoControl surfaced exposures we’d been guessing about for years. The guessing is over.

What do you dislike about the product?

We didn’t really have a clear inventory of who could see what across Microsoft 365, OneDrive, and Teams. It was mostly spreadsheets and hope. Now we can answer access questions in minutes, and board reporting has gotten easier as well.

What problems is the product solving and how is that benefiting you?

We didn’t really have a clear inventory of who could see what across Microsoft 365, OneDrive, and Teams. It was mostly spreadsheets and hope. Now we can answer access questions in minutes, and board reporting has gotten easier as well.

What do you like best about the product?

Within three days of connecting Microsoft 365, SharePoint, OneDrive, and Teams, DoControl surfaced exposure we’d been guessing about for years. Now the guessing is over. Fair trade.

What do you dislike about the product?

In our case, the OAuth risk scoring can feel like a black box at times. I can see the inputs, but I don’t always understand the reasoning behind the different scores between two similar apps.

What problems is the product solving and how is that benefiting you?

Our auditors asked who had access to what. Before DoControl, the honest answer was, “We think we know.” Since then, exposure is down 94%, and it stays down because the workflows keep things under control and hold the line.

What do you like best about the product?

For context: we’re about 120 employees in the cybersecurity sector, with Google Workspace and Slack as our core stack. Visibility—finally. We ran the free risk assessment, and it came back showing 12,460 public and external assets. I went quiet for a minute, and then I started clicking through the results. Our CEO asked for the exposure number in the first week, and this time I actually had one.

What do you dislike about the product?

The depth can vary depending on the connector. In the demo, test the specific connectors you rely on before you buy.

What problems is the product solving and how is that benefiting you?

We didn’t really have a clear inventory of who could see what across Google Workspace and Slack. It was mostly spreadsheets and hope. Now we can answer access questions in minutes, and board reporting has gotten easier as well.

What do you like best about the product?

I filtered for every file that had been shared with personal Gmail accounts, selected them all, and revoked access. Just like that, about 5,040 exposures were gone before lunch.

What do you dislike about the product?

For us, the custom keyword lists and regex management could really use a more user-friendly interface. As it stands, it feels like the experience is built primarily for engineers.

What problems is the product solving and how is that benefiting you?

A decade of Microsoft 365 sharing with essentially zero governance behind it. What was scoped as a weekend project ended up stretching into weeks. Now my team does the detection work. Fair trade.

What do you like best about the product?

Asset inventory that covers users, files, external users, OAuth apps—everything. I was able to get it all within a week, and there were no agents to install.

What do you dislike about the product?

To be honest, it can be hard to understand the OAuth risk score at times. I know what inputs go into it, but I don’t really understand the process behind it or why similar apps can end up with different risk levels.

What problems is the product solving and how is that benefiting you?

Our leadership used to keep asking about our exposure to risks, and I would keep giving them estimates. Now, instead, I can give them queries. Our initial cleanup took us about a week; otherwise, it would have turned into a manual cleanup that would drag on forever.

What do you like best about the product?

Some background: we’re roughly 2,500 employees at an insurance company, and most of our data lives in Google Workspace, Slack, and Salesforce. We assumed our sharing hygiene was pretty decent, but DoControl’s initial scan showed otherwise—around 10,000 files were shared outside the company, with some of those shares untouched since 2019. We even found files still being shared by employees who left in 2019, and those links were still live. That was honestly the wow moment. You connect Google Workspace and, about an hour later, you’re looking at every overshared file across the company, sortable by owner, department, and sensitivity.

What do you dislike about the product?

The first dashboard view is a lot to take in. Honestly, without the onboarding sessions, new admins tend to flail for about a week before they find their footing. In our case, the per-user model also means that every hiring wave pushes the bill up, so it’s something to keep in mind. My one tip is to plan for that during the budget cycle so it doesn’t catch you off guard.

What problems is the product solving and how is that benefiting you?

Leadership kept asking how exposed our data was, and I kept giving them estimates. Now I can give them queries instead. The initial cleanup wrapped up in 48 hours. Before this, our plan was basically a summer intern and a prayer. Exposure is down 91%, and it stays down because the workflows keep holding the line.

What do you like best about the product?

What I like most is being able to fix our history instead of just watching it. We cleaned up 12,530 overshared assets in Microsoft 365 with only a few clicks, and then set up scheduled workflows so it doesn’t pile up again.

What do you dislike about the product?

In practice, the mobile experience is essentially read-only. It’s honestly fine for quick triage, but not really suitable for admin work.

What problems is the product solving and how is that benefiting you?

After a decade of Microsoft 365 sharing with essentially no governance behind it, we finally have clarity. Exposure dropped 63% in the first quarter, and the audit trail shows exactly how that happened.

What do you like best about the product?

The one-click cleanup at scale. In our first month, we remediated close to 80,500 assets. Honestly, with our previous tool, it was a ticket-per-file operation.

What do you dislike about the product?

Twice, an update reset my saved filters. It’s annoying, though not a dealbreaker.

What problems is the product solving and how is that benefiting you?

The backlog built up because we were growing quickly for years, and we ended up with more files than we had people-hours to handle. It felt like there was no finish line. Even so, we managed to complete the cleanup without adding any headcount.

What do you like best about the product?

Within a single morning of connecting Microsoft 365, Teams, and SharePoint, DoControl surfaced exposure we’d been guessing at for years. That guessing is over now. There were no agents, no proxies, and no network taps to deal with—just API connections, and we were done.

What do you dislike about the product?

For our team, the out-of-the-box alert thresholds were too sensitive for a company of our size. We ended up tuning them weekly for about a month, and that was enough to get things settled.

What problems is the product solving and how is that benefiting you?

Years of growth left us with a sharing mess that nobody really owned: 4,500 external shares, no process, and no visibility. The initial cleanup was finished in a single morning. Before this, the “plan” was basically a summer intern and a prayer.

What do you like best about the product?

The Google Workspace side really impressed me. Beyond that, though, everything we needed was either out of scope or outside our budget.

What do you dislike about the product?

Deployment was fast, but the alert noise in the first month burned real analyst time. Also, the connectors for two of our core apps never reached the depth we were shown for Google.

What problems is the product solving and how is that benefiting you?

We knew the exposure was there, but manual cleanup couldn’t keep up with how much new sharing was happening each week. Within Google Workspace, the problem became more manageable. For us, though, everywhere else we needed help, it stayed about the same size.