WorkspaceGuard
Google Workspace Security Posture & Audit Platform
Short summary
Client: A cloud technology provider helping schools and organizations manage Google Workspace.
Need: Bring security settings, risk scores, application access and audit reporting into one review workflow.
Challenge: Normalize fragmented API data, explain risk across services and organizational units, and preserve the differences between app deployments.
Solution: Existek designed a Node.js and Angular platform on Google Cloud, combining data ingestion, transparent risk scoring, contextual reviews and exportable reports.
Impact: One workspace for understanding configuration exposure, prioritizing findings and documenting the next administrative action.
Market
Education
Technologies
Angular
Node.js
Google Cloud
Team size
Duration
What’s WorkspaceGuard for?
WorkspaceGuard turns Google Workspace configuration and usage data into a practical security review. Administrators can see risk by service, inspect settings for specific organizational units, review third-party access and produce evidence-based audit reports.
AI roadmap
Clearer policy reviews.
Human decisions.
The roadmap explores AI-assisted review of data-loss-prevention rules. The concept explains policy gaps and suggests points to clarify, while administrators retain control of every decision and configuration change.
WorkspaceGuard · AI policy review concept · Planned enhancement
-
Review policy quality
Use AI to explain unclear DLP rules and suggest points that need a closer review.
-
Clarify the next action
Propose questions about scope, exceptions and ownership before an administrator changes a rule.
-
Keep decisions human
A planned enhancement. Administrators evaluate suggestions and retain control of policy changes.
Core Features
A clear view of workspace security
The overview brings overall risk, service-level exposure and high-priority findings together. Administrators can move from a workspace summary to the affected service, setting and organizational unit without losing context.
Contextual settings review
Service-specific views compare current settings with recommended baselines. A contextual panel explains the security rationale, audience and control mapping, with a direct route to the relevant Google Admin Console setting.
Application families, individual deployments
The application repository groups related products while keeping each web app, extension, mobile package and staging client distinct. Every deployment retains its own scopes, users, risk score and policy status, preventing vendor-level grouping from hiding exposure.
Access matched to responsibility
Super Admin and Auditor roles separate administrative control from review and reporting.
Visibility before action
Evidence, rationale and organizational-unit context accompany each finding. Administrators remain responsible for changes.
Auditing and reporting
Exportable posture and compliance-mapping reports turn detailed findings into a reviewable record. Administrators can define the audience, inspect supporting evidence and share a clear summary with technical teams or leadership.
Discovery & UI/UX design
Product goals
- One place to review workspace security
- Role-aware access for admins and auditors
- Risk scores explained by setting and scope
- A direct path from finding to evidence
- An extensible service and application model
Target market
Challenges
- Fragmented APIs and incomplete policy visibility
- Different baselines across organizational units
- Keeping product families and client IDs distinct
- Making risk scores and recommendations explainable
Dense security data, clear review paths
The interface preserves the source product’s logic: a persistent sidebar, service navigation, organizational-unit filters and contextual details. The refreshed screens use a dark navigation rail, light working surfaces, clear tables and consistent risk labels. Current values and recommended baselines stay visible together.
Blue connects the dashboards and review controls; a dark navigation rail anchors the workspace. Violet is reserved for the AI roadmap concept.
Roboto, consistent spacing and a compact type scale keep complex settings, scope lists and evidence easy to scan.
Consistent risk language
Low, elevated, moderate, high and critical labels pair color with a written level and a numerical score. Configuration values, app risks and review priorities use the same visual vocabulary.
Highlights
Development and Testing
Technology choice
The documented stack uses Node.js for the backend, Angular for the frontend and the client’s Google Cloud environment for hosting. Policy, Directory and Reports APIs supply configuration and usage data. Ingestion and scoring are separated from presentation so parameter coverage and governance workflows can expand over time.
Backend
NodeJS
Ingestion
Policy, Directory and Reports APIs
Assessment
Rules-based risk and baseline evaluation
Frontend
Angular
Context
Service, role and organizational-unit views
Reporting
Dashboards, evidence and PDF / CSV exports
Cloud
Google Cloud
Deployment
Client-managed Google Cloud environment
Integration
Authorized workspace data collection
Architecture implementation
Transparent risk rules. Traceable evidence. Administrative control.
Collected data is normalized before the risk engine evaluates settings and scopes.
Findings retain their service, organizational-unit and evidence context.
AI-assisted policy review is a separate roadmap concept.
Team composition
Quality assurance
Highlights
Project Summary
WorkspaceGuard brings configuration posture, application governance and audit reporting into one product experience. The delivery approach starts with a focused Google Workspace integration and transparent risk rules, then expands into richer application intelligence and AI-assisted policy review.
Discovery & design
2+ weeks
MVP engineering
15+ weeks
Iterative growth
Ongoing
Highlights
Our locations
Warsaw, Poland, 00-645
Bucharest, Romania, 011663
Vinnytsia, Ukraine, 21021
