How does your workspace security measure up?

Google Workspace powers your business, but without the right configurations and tactics, it’s an open door to data breaches, account takeovers, and compliance failures.

Our free, 25-question evaluation assesses your security posture across Accounts, Data, Email, and Configurations.

When you’re finished, you’ll receive a report with an overall risk score, risk score by category, and tailored recommendations.

1. Accounts

2. Emails

3. Drive

4. Config

Do you have MFA enforced?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Are you automatically monitoring for accounts missing MFA?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have an offboarding policy for dormant accounts?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

How are your employees authenticating?

Usernames and passwordsSSO in use, but not configured for all servicesSSO required for all services

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have a policy in place dictating which OAuth apps can connect to accounts?

Apps allowed by default, not reviewedApps allowed by default, reviewed laterApps blocked by default, reviewed first

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

How does your organization monitor for compromise?

Manual review of logsLimited detections based on authentication logs onlyContinuous detection for OAuth, sessions, geo anomalies, etc

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

How do you audit access to sensitive data by your employees?

AutomaticallyManuallyWe don't audit access

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have a playbook for unexpected or unusual logins to accounts?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

What's your process for suspending a compromised account, and how long does it take?

Manual account lockdown, over an hourManual lockdown, less than an hourAutomated account/session lockdown, nearly instant

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Are you using standard email controls that Google provides?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

How are you detecting inbound threats?

Google's native detectionsRule-based security toolAdvanced phishing/malware detection enabled

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you use Google to filter out your spam messages?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have visibility into the amount/types of sensitive information in employeess' emails?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have visibility into suspicious auto forwarding rules in employees' Gmail accounts?

No insight into problematic forwarding rulesAlerting for forwarding rulesAlerting and disabling of forwarding rules

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have a playbook when your employees report phishing emails?

Yes, automatic responseYes, manual triageNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have a way to redact old emails?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

What are your external sharing settings?

Anyone with a linkOrg only, users can changeRestricted, admin approval req'd

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you use third-party document storage (excluding Drive)?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you have a way to audit file access?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Are you continuously monitoring for sensitive content in files?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Do you audit changes to your Workspace configurations?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Can you automatically restrict access to your Workspace based on user behavior?

YesNo

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

How do you use Google's Security Center?

Don't use Security CenterManually use Security Center periodicallyHave set automated alerting for Security Center

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Are you integrated with a SIEM/SOAR?

No integrationLimited log types sent to SIEM/SOARAll Workspace event logs sent to SIEM/SOAR

Question {{step-current}} of {{step-all}}

1. Accounts

2. Emails

3. Drive

4. Config

Are you automatically monitoring for any new Google Groups with external members, or that external emails can be sent to?

YesNo

Question {{step-current}} of {{step-all}}

Google Workspace Evaluation score is loading...

Loading text

0%

Results

Overall Score

0

of 100

Scores represent how well your organization is currently managing Workspace risk. Higher scores indicate more complete risk mitigation, lower scores indicate more risk.

Score Breakdown

Accounts

0

of 100

Email

0

of 100

Drive

0

of 100

Configs

0

of 100

Risks & Recommendations

Looking for more insight on how to secure your Google workspace?

Chat with our security team

Google Workspace Evaluation

How does your workspace security measure up?

Results

company

platform

CUSTOMERS

Providers