Observed arrival · 2026-09-16
OAuthRadar and the invisible grant inventory
An open-source, self-hostable security tool for inventorying, scoring, monitoring, and revoking OAuth grants across major work platforms.
Field notes
OAuthRadar organizes OAuth grants into a cross-provider inventory rather than leaving them scattered across separate administration consoles. Its illustrated record includes scope names, account membership, vendor security-page status, token-expiration behavior, and a numeric risk breakdown; the sample inventory reports 1,820 grants. The site says administrators can choose alert thresholds and send notifications to email, Slack, or a signed webhook, while revocations are confirmed by name and retained in an audit log.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue