Cybersecurity
Access Review & Leaver Tool
A simple app that lists who has access to what, asks managers to confirm it every quarter, and runs a full leaver checklist in one click.
For businesses that cannot say for sure who still has access to what, or have found a former employee still logged in. This app runs a user access review every quarter by email and gives you a one-click leaver checklist with an audit trail.
What's included
- Written scope and fixed quote (free)
- Access list pulled from Microsoft 365 / Google and up to 5 other apps
- Quarterly review emails with approve / remove buttons
- One-click leaver checklist with audit trail
- Exportable evidence for Cyber Essentials and PDPA
- Hosted in your own account; source code is yours
- 30 days of bug fixes after launch
What you get
Illustrative exampleNot included
- Apps without an API (manual checklist items instead)
- Hosting and third-party fees
What we need from you
- Admin consent for the apps involved
- Who approves access for each team
How it goes
- 1
Order & brief
Answer a few questions about your business — about 3 minutes.
- 2
Get your fixed quote
We reply with a fixed price and timeline. Pay only if you accept.
- 3
Give access
We send step-by-step instructions to invite us — no passwords by email.
- 4
Review & done
We deliver, you review on your order page, we refine until it's right.
Access Review & Leaver Tool — questions
Protect Plus is a service where we run the review with you. This is your own software that sends review emails to managers and runs leaver checklists, and keeps working without us.
Microsoft 365 or Google plus up to 5 other apps with an API. Apps without one become manual checklist items.
Yes. It exports evidence suitable for Cyber Essentials and PDPA records.
More in cybersecurity
Cybersecurity
Security Health Check
A written review of your domain, website, email and Microsoft 365 / Google Workspace settings — with a fix list.
3 business days
Cybersecurity
Microsoft 365 / Google Security Lockdown
Turn on MFA for everyone, block phishing and risky sign-ins, and stop accidental file sharing.
5 business days
Cybersecurity
Website Security Hardening
Lock down WordPress or your CMS: updates, firewall, backups, login protection and security headers.
3 business days