Permission decay analysis
Find privilege that was granted and never used: unused permissions, narrowable roles, dormant principals, and ungranted use.
Find privilege that was granted and never used: entitlement inventory, access-log windows, and decay verdicts.
Open-source role mining and access review for Microsoft Entra ID and any system you can export to CSV. See who has access to what, find what to clean up, export review-ready Excel. Self-hosted, MIT.
Open-source security for SaaS: one identity and access graph across GitHub, Google Workspace, Okta, and Slack, with change detection and Python policies.
Read-only Microsoft Entra ID (Azure AD) access review PowerShell scanner + Python report that scores MFA gaps, privileged roles, legacy auth, Conditional Access and PIM risks into an A–F posture report for ISO 27001 / NIS2 audits.
manifest-identity is an application for reviewing who has access to what across cloud accounts and directories. It keeps a record, written by a named person, of what access each identity may have, imports what the systems report, and puts every difference in front of the person responsible. It never changes anything in the systems it reads.
Claude Code skills for Microsoft 365 governance: a plugin with five skills for Graph permission preflight, Entra ID posture review, Intune baseline check, Teams and group sprawl and a quarterly access review pack. Read-only Graph exports; tested standard-library scripts evaluate the JSON offline.
See who can reach what across SharePoint Online, and how — access grouped by route so oversharing is surfaced first. A Copilot-readiness tool (Get-UserAccess + Get-SiteAccess).
Scans a GitHub org for security advisories and stale access, scores each collaborator's real contribution per repo, and suggests (never performs) access removals. Static HTML dashboard, idempotent, rate-limit aware.
PowerShell-based IAM access review demonstrating identity governance, NIST control testing, remediation tracking, and Joiner-Mover-Leaver processes.
270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF
Manage identity and access with RBAC, ABAC, OAuth2/OIDC, approval flows, and audit logs for secure enterprise control
Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.
Local evidence workspace for cybersecurity: tool findings, action reviews, access changes and traceable reports.
Identity Governance & Access Review lab demonstrating access certification, least-privilege enforcement, access remediation, audit evidence collection, and Active Directory security group management.
Identity, Access Review & Permission Audit Platform — Centralized identity governance, least-privilege enforcement, access reviews, and tamper-evident audit trails
Automated Microsoft 365 access review via Microsoft Graph: inactive accounts, orphaned admins, licence waste, with a reusable review procedure
Offline synthetic IAM review lab comparing Entra-style identity data with HR records using deterministic governance rules and Markdown reports.
React + TypeScript control-plane for access posture, policy exceptions, remediation tracking, and executive identity governance visibility.
To associate your repository with the access-review topic, visit your repo's landing page and select "manage topics."