Created by Sola Security
Last updated 20 January 2026
Tags Google WorkspaceHiBobOffboardingInsider RiskData Loss PreventionFile ActivityOAuth SecurityGmail Security Access ControlUser Behavior AnalyticsTermination MonitoringData Exfiltration+9X
Monitor departing employee Google Workspace activity to detect potential data exfiltration, unauthorized sharing, and access risks during offboarding. This app integrates HiBob employee termination data with Google Workspace audit logs to track file downloads, external sharing, deletions, OAuth app authorizations, and Gmail security settings, enabling security teams to identify high-risk behaviors before employee termination dates.
Who is it for?
CISOs, security operations teams, HR security partners, and IT administrators responsible for securing offboarding processes and preventing insider threats during employee transitions.
What problems does it solve?
Integrates HiBob HR data with Google Workspace activity to provide visibility into departing employee behavior during notice periods. Detects risky behaviors like mass file downloads, personal email sharing, OAuth app access, and Gmail forwarding to prioritize investigation efforts and prevent data loss.
Key security questions
Which users pose the highest offboarding risk based on their activity patterns?
Are departing employees exhibiting anomalous behavior such as mass file downloads, deletions, or sharing to personal emails?
Which employees have enabled risky Gmail settings like forwarding, IMAP, or POP access before termination?
What OAuth applications have departing employees authorized that may pose data access risks?
