sociolog.in

What It Is

sociolog.in is an OAuth visibility and response tool for Google Workspace. Its core purpose is to address the blind spot created when employees frequently use “Sign in with Google” to authorize third-party apps. It pulls the most recent 180 days of OAuth token and login events available through the Google Admin SDK, then retains and enriches that data for a longer period in its own database for auditing, alerting, and export. The product explicitly states that it does not read email, document, or message content; it only processes app names, scopes, authorization/revocation events, and basic user information.

Core Capabilities and Security Posture

In terms of protection model, it is closer to an OAuth security audit, SaaS permission governance, and response tool than a pre-authorization blocking gateway. Admins can define policies by scope, such as Gmail, Drive, Admin, or custom permissions. When an app requests a prohibited scope, the system can isolate the app, trigger email/Slack/webhook alerts, and allow admins to approve or block it after review. Its only write operation is revoking OAuth tokens for blocked apps. Risk scoring flags sensitive scopes and unusual access patterns, while audit logs and reports can support compliance and SIEM integration.

Deployment, Integrations, and Management

Deployment is lightweight: a Google Workspace admin signs in and grants read-only Admin SDK permissions to access the dashboard, with no proxy, endpoint agent, or browser extension required. For integrations, the Startup plan supports Slack, webhooks, and SIEM export, while the Enterprise plan adds custom integrations, SSO, and SCIM. Management features cover app inventory, risk scoring, alerts, audit logs, and exports, making it suitable for security or IT teams that want centralized governance over OAuth authorizations.

Pricing and Target Users

Pricing is transparent: the Free plan includes 5 seats, app inventory, risk scoring, email alerts, and audit logs. Startup costs $3 per seat per month, charged after the first 5 free seats, and includes 90-day log retention, Slack/webhook support, SIEM export, and priority support. Enterprise is custom-priced and includes 365-day log retention, SSO/SCIM, dedicated support, and an SLA. It is suitable for small and midsize teams through large organizations using Google Workspace and concerned about excessive permissions granted to AI tools and third-party SaaS apps.

Pros, Cons, and Access from China

Its strengths are clear positioning, simple onboarding, a low free-tier barrier, and relatively explicit statements about data access boundaries. Its limitations are that it only covers Google Workspace, cannot block a user’s first authorization in advance, and can only detect, alert, and revoke after the fact. The materials also do not disclose compliance certifications such as SOC 2 or ISO 27001. Access from mainland China, payment methods, and localization support are not specified, so china_access can only be rated as unknown. Alternatives may include native Google Workspace logs, CASB/SSPM tools, or OAuth audit capabilities within SIEM platforms.