Security News > 2020 > June > Things to keep in mind when downloading apps from G Suite Marketplace

Security researchers have tested nearly 1,000 enterprise apps offered on Google's G Suite Marketplace and discovered that many ask for permission to access to user data via Google APIs as well as to communicate with external services.

The G Suite Marketplace is an online "App store" from which enterprise applications that are integrated with G Suite can be added to an entire domain or to individual G Suite accounts.

Both end users and G Suite administrators can discover and install new apps from the Marketplace.

Although Google performs the aforementioned review and although it offers app developers the option to receive a trust-inducing badge on their G Suite Marketplace listing once they passed a security assessment by a third-party security firm, users should keep in mind that Google does not accept responsibility for any compromise or loss of data that may result from them using a G Suite Marketplace app, so they should evaluate the potential risks themselves after reviewing the app's permissions request shown when they want to install the app.

"We have a rigorous process of verification for every application that is submitted to the G Suite Marketplace, and we continue to work with our developers to ensure compliance with our policies. The conclusions in this report do not accurately reflect the stringent third-party data access and privacy protections we have in place to protect our users. For our G Suite customers, we provide admins full visibility and comprehensive controls to manage app access," a Google spokesperson told Help Net Security.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/u_hQAdkB2wI/