Platform
Google Workspace
Access control, Drive and Gmail DLP, Chromebooks, Active Directory and education.
Workspace detailsCloud access security · CISOs · IT & SecOps · Cloud admins
QAuth
Secure your cloud universe with quantum-enhanced encryption.
QAuth, formerly CloudCodes, is a full-strength cloud access security broker (CASB) and integrated SSO platform designed to secure today’s cloud-centric organisations across their SaaS applications, data and users.
Playground
Take the QAuth console for a spin.
Explore the new QAuth admin experience with a sample organisation: identity analytics at a glance, every policy in one place, users and org units, and the email DLP dashboard. Switch policies on and off, filter users and work through the DLP review queue. Every name and figure here is sample data.
Example Financial GroupSample organisation · SSO & CASB · 2,212 users
Last sync: 1 hour ago · 6 apps connected · 2,212 users
Applications
- Google Workspace
- Microsoft 365
- Slack
- Jira & Confluence
- Dropbox
- Salesforce
- AWS workloads
Access policies · Google Workspace
Organisational unit: Finance
IP restrictionCorporate network ranges only
Geo-fencingAllowed countries: Canada, Malaysia
Time restrictionMonday–Friday, 08:00–18:00
Device restrictionApproved devices only
Third-party app blockWhitelisted apps only
Quantum-enhanced encryptionQRNG-backed keys on agent-protected files
Turn on JavaScript to explore the interactive playground.
Sample data for illustration, based on the QAuth admin console.
Talk to the QAuth team- Enterprise customers
- 200+
- Established market demand and integration
- Protected users
- 100,000+
- Across diverse global markets
- Industries served
- 30+
- From aviation to pharmaceuticals
- Securing cloud since
- 2011
- Now part of the QSE Corp family
Capabilities
What QAuth ships with.
Access control & SSOSingle sign-on and policy-based access to every sanctioned SaaS app.
CASBCovers Google Workspace, Microsoft 365, Slack, Jira, Confluence and more.
Data loss preventionStops data leaving across cloud apps, users and endpoints.
Email securityPolicy-based protection from phishing and account takeover.
Zero TrustUsers, devices and context verified before access is granted.
Shadow IT visibilityFinds unsanctioned SaaS and brings it under one governance model.
Quantum-enhanced encryptionQuantum-secure keys protect data deployed through agents.
Compliance & governanceMeets regulatory requirements across cloud environments.
Heritage
Caretakers of your cloud security since 2011.
QAuth began life in 2011 as CloudCodes, with a single objective: bring innovative, agile cloud security to businesses worldwide. Today it is part of the QSE Corp family, pairing more than a decade of CASB engineering with QSE’s quantum-secure encryption stack.
QAuth gives enterprises the freedom to adopt cloud collaboration without inheriting cloud data risk. Gain complete visibility and control to reduce your threat surface, block known and unknown intrusions, and implement layered security across every sanctioned SaaS application.
Credentials
Proven, recognised, audited.
- Named by Gartner as a sample vendor for Cloud Security and SaaS Security in several published reports, as CloudCodes
- SOC Type II certified, as CloudCodes
- More than a decade of CASB engineering
- Integrated with QSE’s QRNG entropy and key-management fabric
The four pillars of CASB
Visibility, compliance, data security and threat protection.
A cloud access security broker is usually judged on four things. This is where each QAuth module fits.
Visibility
See which cloud apps are in use, sanctioned or not, and who did what. Shadow IT discovery, dashboards, reports and an audit trail.
Compliance
Show that policies are in force. PII, PHI, PCI and HIPAA templates, email agreements for new joiners, and CIS benchmark checks for AWS.
Data security
Stop sensitive data leaving through sharing, downloads or email. DLP for Drive, OneDrive, SharePoint and email, containerisation and quantum-enhanced encryption.
Threat protection
Keep the wrong people and devices out. IP, device, browser, time and location restrictions, multi-factor authentication and third-party app blocking.
Security modules
Every control, in one console.
A control point for continuous visibility, compliance, threat protection and cloud security. Collaborate without limits and work safely across cloud services, on any device, anywhere in the world.
Access Control
Regulate and monitor permissions to business data through policy.
Access Control
Regulate and monitor permissions to business data through policy.
Cloud apps offer data access from anywhere, on any device, at any time — and that flexibility can be misused. What if a user copies proprietary data after hours, forgets to log out of a public machine, or connects an unofficial, malware-infected device? QAuth Access Control gives macro-level visibility into data and user behaviour, restricting unauthorised access while leaving enough freedom for smooth day-to-day work.
IP restriction
Restrict access to business data to one or more specified IP addresses. Whitelist or blacklist for the organisation, an OU or a single user — no firewall settings or local installation required.
Browser restriction
Allow business data only from browsers IT approves — Chrome, Firefox, Safari, Edge. Managed via the Chrome management console with OU granularity and automated rollout.
Device restriction
Block unknown, public or unauthorised devices by MAC ID, with daily violation reports. Supports Windows, macOS, Linux and Chromebook, with self-service rollout.
Geo-fencing
Create virtual work boundaries by city or country, for one user, an OU or the whole organisation. No additional apps required.
Time restriction
Limit access to defined workdays and hours, across multiple time zones, with no extra extension.
Session timeout
Terminate idle sessions and cap total session duration so unattended machines can’t reach corporate data.
Third-party app blacklisting
Block sign-in to any third-party app the admin hasn’t whitelisted — a preventive control rather than post-breach revocation.
Domain whitelisting
Define which external domains users may communicate and share with, and block everything else.
Cloud DLP (Data Loss Prevention)
Monitor, track and prevent data loss in use, in motion and at rest.
Cloud DLP (Data Loss Prevention)
Monitor, track and prevent data loss in use, in motion and at rest.
Set policies from a single console that govern how business data is used across Google Workspace, Microsoft 365, Google Drive, OneDrive, Dropbox and more — tracking or restricting sharing, downloading, copying, printing and deletion for a user, an OU or the entire organisation, with support for PII, PHI, PCI and HIPAA compliance.
Track or block user activities
Downloads, Drive sharing, personal Gmail on the business network, clipboard copy/paste, printing and screenshots of business data.
Drive security
Containerise Drive, control sharing across OUs and individuals, and block downloads, printing, screenshots and clipboard operations.
Containerisation
Encrypt Drive downloads and Gmail or Outlook attachments so files are readable only inside the QAuth Viewer — unreadable anywhere else.
Compliance setup and check
Pre-built templates for PCI, PHI, PII, HIPAA and more, with automatic revocation of external access when a violation is detected.
Block personal Gmail
Stop data moving between personal and business Gmail, and stop business from being conducted in an unmonitored account.
Block USB access
Restrict pen drives, external hard drives and flash storage so business data can’t walk out of the building.
Agent-based and agentless
A local proxy agent that inspects only monitored traffic and stores nothing, or agentless API polling for near real-time action — or both.
Alerts, audit trail and reporting
Real-time admin alerts on every violation and a searchable, exportable audit trail of who moved what, from where.
Single Sign-On
One-click access to every cloud application with a single identity.
Single Sign-On
One-click access to every cloud application with a single identity.
QAuth SSO protects thousands of applications from the risks of password management and lets internal and external users reach mobile, cloud and on-premises apps on any device with one set of credentials. Administrators track activity in real time, with provisioning and de-provisioning built in.
One secure portal for all apps
A single set of credentials opens every sanctioned application from one launchpad, on desktop, phone or tablet.
SAML integration
Single-point access to all apps from predefined entitlements, with users mapped to individual access for easy monitoring.
Provisioning and de-provisioning
Add or remove apps and entitlements without manual effort, so leavers lose access the moment they leave.
On-premises app integration
Bring custom on-premises applications into the same portal through custom protocol support.
Certificate-based device restriction
Bind sign-on to trusted, certificate-enrolled devices so credentials alone are never enough.
Anti-phishing control on login
Harden the login surface against credential-harvesting pages and lookalike domains.
Identity Management
Identify, manage and control user identities across the entire system.
Identity Management
Identify, manage and control user identities across the entire system.
Govern every identity — authentication, privileges, authorisation and roles — across enterprise boundaries, improving security and productivity while cutting cost, repetitive tasks and downtime. Covers wired, wireless and BYOD users, with directory integration built in.
Advanced password policy
Complexity rules, expiry with reminders, history and keyword blocking, and lockout after failed attempts.
Two-factor authentication
A passkey from the user’s own device alongside the password, enforced always, on the corporate network, or by remembered IP.
Self-service password reset
Account recovery through secret questions or one-time passwords by SMS or email, removing helpdesk load.
Biometric authentication
Fingerprint and device biometrics as an authentication factor on mobile devices.
Active Directory / Azure AD
Use your existing directory as identity provider, including multiple forests and per-location domain controllers.
Windows login support
Extend the same identity and policy model to the Windows desktop login.
Mapping user identities
Map identities across directories and applications so one person is one governed identity everywhere.
Session and login audit trail
Every authentication, failed attempt, password change and privilege update in a searchable history.
Shadow IT
Agentless discovery, monitoring and control of unsanctioned SaaS.
Shadow IT
Agentless discovery, monitoring and control of unsanctioned SaaS.
Evaluate and report every potential IT risk, monitoring, blocking and reporting the use of authorised and unauthorised apps. Blocking everything is possible but rarely wise — QAuth strikes the balance between what users need and what the enterprise must protect.
Complete visibility
Every cloud service in use across on- and off-premises networks, including services invisible to web proxies and firewalls.
Customised control
Policies by service, operation, information and identity, enforced by block, alert, quarantine, bypass or coach.
Information protection
Detect and protect sensitive content at the boundary with encryption and cloud DLP; block uploads and downloads on unsanctioned apps.
Enforce compliance
Activity-level analysis, detection of non-compliant behaviour, and audit trails for every cloud operation.
Email Security & Email DLP
A configurable email gateway with a full DLP policy framework.
Email Security & Email DLP
A configurable email gateway with a full DLP policy framework.
Configured on your email domain within hours, QAuth acts as a gateway for outgoing mail with DLP policies per user group — because email remains the most common leak channel in any organisation.
Email to personal domains
Detect mail sent to consumer addresses such as gmail.com, outlook.com or aol.com.
Email to outside domains
Track or reject mail to domains users shouldn’t communicate with.
Emails with keywords
Pre-defined PII and PHI policies, or your own regular expressions and keyword sets.
Restricted attachments
Label document types as restricted and track every message that carries them.
Remedial actions
Reject with sender notification, track the flow, or notify the reporting manager or super admin.
Encryption and identification
Confidential messages identified and encrypted, with deeper analysis of content and any attachment type.
Mobile Device Management
Monitor, manage and protect every device that touches corporate data.
Mobile Device Management
Monitor, manage and protect every device that touches corporate data.
Isolate corporate data, secure email, monitor documents on mobile devices, and manage laptops, phones, tablets and desktops from one console.
Centralised console
One platform for compliance initiatives, supervised and tracked against a defined rule set.
BYOD support
Employees use their own devices without the enterprise inheriting data-leakage risk.
Systematic management
Remotely manage every mobile component and keep a record of the data accessed on each.
Contextual app access
Control app access by time, IP address and geolocation, with containerised app support.
Updates and enforcement
Push updates and enforce security posture across iOS and Android fleets.
Backup and restore
Protect and recover device data as part of the managed lifecycle.
Shared Drive
Team-owned documents, reclaimed storage, no duplicate content.
Shared Drive
Team-owned documents, reclaimed storage, no duplicate content.
Files belong to the team rather than an individual, and ownership transfers by policy — so nothing is lost when someone leaves.
Save drive space
Eliminate duplicate content and multiple iterations across personal drives.
Manage shared folders
Admins can change ownership or move folders inside Shared Drive at any time.
Inherit permissions
Folders inherit permissions from the parent so entitlements stay consistent.
Access anywhere
Reach shared files from phone, tablet or desktop, any time.
Email Signature
Unified, professional signatures deployed centrally.
Email Signature
Unified, professional signatures deployed centrally.
An email signature is brand recognition on every message your organisation sends. QAuth removes the need for standalone signature software.
Pre-designed templates
Choose from ready-made layouts or build your own.
Standard and custom fields
Name, title, contact details, hours, logo, social links and disclaimers — plus custom fields such as employee ID.
Identity integration
Signature fields bound to the user identity in the admin panel, so details stay accurate automatically.
Granular rollout
Apply to all users, a specific OU or a single user.
Value Add-Ons
Branding, communication and governance built into the login moment.
Value Add-Ons
Branding, communication and governance built into the login moment.
Every employee logs in at least once a day. QAuth turns that moment into a controlled, branded, governed touchpoint.
Custom login page
Your own HTML or a supplied template — full branding control over the page every employee sees daily.
Landing pages
Redirect users after login to an intranet portal or internal site.
Corporate message broadcast
Messages on login for the whole organisation or selected OUs, with configurable display frequency.
Email agreement policy
Bind new joiners to corporate terms with a one-time agreement at first login.
Dashboard and reporting
OUs, users, policies and violations at a glance, with instant alerts and monthly PDF reports.
Quantum-Enhanced Encryption
QSE quantum-secure keys applied to agent-protected data.
Quantum-Enhanced Encryption
QSE quantum-secure keys applied to agent-protected data.
The capability QAuth gained by joining QSE Corp: data protected by QAuth agents is encrypted with keys derived from QSE’s hardware QRNG entropy, so containerised documents and attachments are protected against harvest-now-decrypt-later attacks.
QRNG-backed keys
Keys generated from true hardware quantum entropy rather than software pseudo-randomness.
Agent-side protection
Files containerised by the QAuth agent inherit quantum-secure encryption at the point of download.
Crypto-agile foundation
Aligned with NIST post-quantum standards and ready to rotate as they evolve.
Platform integration
Shares the entropy and key-management fabric used across QSE Storage, Entropy Core and qREK.
Supported platforms
Protect the applications your business already runs on.
Twelve SaaS and cloud platforms, governed by one policy framework.
Google Workspace
Seamlessly secure Google Workspace and ensure compliance.
Take macro-level control and visibility over enterprise data in Gmail, Google Drive and Chromebook through flexible yet stringent policies, alerts and reports — whether a user forgets to log out on a public machine, shares documents with strangers, clicks a phishing link, moves files to a personal drive or authorises an unvetted third-party app.
- Access control — IP, browser, device, time and geo-fencing restrictions
- Data loss prevention across Drive, Gmail and Chromebook
- Single sign-on with SAML, provisioning and de-provisioning
- Identity management with password policy, MFA and biometrics
- Consumer Gmail block with auto-logout and admin notification
- Shared Drive for team-owned documents and reclaimed space
- Email signature templating with custom fields and per-OU rollout
- Value add-ons: custom login page, branding, broadcasts, agreements
Microsoft 365
Choose seamless security for your Microsoft 365 data.
Microsoft 365 security is a shared responsibility. QAuth adds user-behaviour analytics, cloud storage data protection and governance, and control over Shadow IT — with admin alerts, restraint of unauthorised tasks, permission changes and coaching messages for end users.
- Access control — browser, IP, login time, device and geo-fencing policies
- OneDrive DLP — block upload and download of confidential items
- SharePoint DLP — govern sharing, downloading and external exposure
- Email DLP for Outlook with attachment containerisation
- Single sign-on and identity management
- Active Directory and Azure AD as identity provider
- Shadow IT discovery across sanctioned and unsanctioned services
- Out-of-box compliance checks for PII, PCI, PHI and HIPAA
Amazon Web Services
Continuous workload assessment against CIS benchmarks.
QAuth continuously assesses AWS workloads against Center for Internet Security benchmarks, monitoring S3, CloudTrail, IAM policies, IAM users and Config in real time and alerting by email on threats and violations.
- Real-time evaluation of AWS resources against CIS benchmarks
- Coverage for IAM, CloudTrail, S3 and AWS Config
- Access key created for admins to evaluate all hosted applications
- Email alerts the moment a policy breach is detected
- Reduced security risk and a stronger compliance posture
Dropbox
Govern enterprise data collaboration on Dropbox.
Extend visibility and granular control over Dropbox with DLP and CASB technology: a control layer with native SSO and MFA, plus contextual awareness of location, service, device and content.
- Access control
- Data loss prevention
- Single sign-on
- Identity management
- Shadow IT
- Value add-ons
Slack
Security for internal and external teams and projects.
Slack keeps a searchable log of every conversation, which makes it a high-value target. QAuth configures Slack across domains and blocks data theft and leakage, with admin control over app authorisation, certificate downloads and domain/user email mapping.
- Access control
- Single sign-on
- Identity management
- Shadow IT
Atlassian Jira & Confluence
Secure project management and proprietary data.
A robust control set for Jira and Confluence with security analytics, live data monitoring and audit logs — plus selective encryption so only authenticated, entitled users can open confidential files.
- Access control
- Single sign-on
- Identity management
- Shadow IT
Salesforce
Best-in-class CRM security for your enterprise.
An API connector protects Salesforce data without changing how users work — real-time security checks and granular controls with visibility across the CRM and its service platform.
- Access control
- Single sign-on
- Identity management
- Shadow IT
- Value add-ons
Zoho
Strong safety across the complete Zoho account.
Protect the Zoho suite and every program your business runs on it — CRM, Email, HR, marketing and address book.
- Single sign-on
- Access control
- Identity management
- Shadow IT
- Value add-ons
- Additional security for GST-compliant Zoho Books
Zendesk
Protect customer service data end to end.
CASB controls for Zendesk keep support conversations, customer records and ticket attachments inside your security perimeter.
- Single sign-on
- Access control
- Identity management
- Shadow IT
Freshdesk
Secure helpdesk operations without slowing them down.
The same access, identity and DLP policy framework that governs the rest of your SaaS estate, applied to Freshdesk.
- Single sign-on
- Access control
- Identity management
- Shadow IT
Chromebook
Defence in depth for Chrome OS fleets.
QAuth adds a cloud data-protection layer through DLP, giving visibility and control to detect, track and block information breaches whether data is in use, at rest or in transit.
- Agent-based and agentless deployment models
- Track or block download, delete, print and screenshot
- Block clipboard operations out of Drive documents
- External sharing controls with blacklisted domains
- Personal Gmail block on company-owned devices
Education
Cloud security purpose-built for schools and universities.
Institutions on Google Workspace for Education keep student and faculty data governed, restrict access outside campus hours and networks, and meet regulatory obligations without adding admin burden.
- Access control
- Data loss prevention
- Single sign-on
- Identity management
- Shadow IT
Admin feature set
Login, identity and control features for administrators.
Identity features
AWS workload assessment
Continuous CIS benchmark assessment for AWS workloads.
QAuth monitors AWS resources — S3 buckets, CloudTrail, IAM policies, IAM users and Config — against Center for Internet Security benchmarks, evaluating them in real time and alerting administrators by email the moment a threat or violation appears.
IAM 19 checks
- Avoid the use of the “root” account
- Ensure MFA is enabled for all IAM users that have a console password
- Ensure credentials unused for 90 days or greater are disabled
- Ensure access keys are rotated every 90 days or less
- Ensure the IAM password policy requires at least one uppercase letter
- Ensure the IAM password policy requires at least one lowercase letter
- Ensure the IAM password policy requires at least one symbol
- Ensure the IAM password policy requires at least one number
- Ensure the IAM password policy requires a minimum length of 14 or greater
- Ensure the IAM password policy prevents password reuse
- Ensure the IAM password policy expires passwords within 90 days or less
- Ensure no root account access key exists
- Ensure MFA is enabled for the “root” account
- Ensure hardware MFA is enabled for the “root” account
- Ensure security questions are registered in the AWS account
- Ensure IAM policies are attached only to groups or roles
- Ensure a support role has been created to manage incidents with AWS Support
- Do not set up access keys during initial user setup for IAM users with a console password
- Ensure IAM policies that allow full “*:*” administrative privileges are not created
CloudTrail 2 checks
- Ensure CloudTrail is enabled in all regions
- Ensure CloudTrail log file validation is enabled
S3 2 checks
- Ensure the S3 bucket used to store CloudTrail logs is not publicly accessible
- Ensure S3 bucket access logging is enabled on the CloudTrail S3 bucket
Config 1 check
- Ensure AWS Config is enabled in all regions
Why QAuth
Controls most CASB platforms leave out.
- 01
Mapping user identities across directories — rarely offered by competing CASB vendors
- 02
Time restriction and device restriction as first-class access control policies
- 03
Geo-location fencing on both web and mobile access paths
- 04
Enterprise-grade password policy with self-service reset and anti-phishing login control
- 05
Personal Gmail block, session timeout and session duration controls
- 06
Agentless and agent-based Shadow IT discovery in the same platform
- 07
Google Drive and Dropbox DLP covering download, share, delete and desktop sync
- 08
Email signature and shared folder add-ons included rather than sold separately
Pricing
Choose the plan that suits your estate.
Licensing is per user, per year. For customisation, volume and partner pricing, speak to the QAuth team.
Plan
Cloud
Contact us · per user / year
- Single sign-on
- Identity management
- Multi-factor authentication
- Integration with AD / LDAP
- Access control
Plan
Cloud DLP
Contact us · per user / year
- Everything in Cloud
- DLP for Google Drive
- DLP for OneDrive
- Gmail and Google Drive compliance
- Web filtering
Deployment
Agent-based, agentless, or both — configured in hours.
Agent-based
A lightweight agent acts as a web proxy for monitored applications only, storing none of the content it inspects. It enables OU sharing controls, delete and download tracking, external sharing control, personal Gmail block and clipboard restrictions.
Agentless
QAuth polls cloud provider APIs — Google Drive, OneDrive and others — for document events, applying multiple policies to different user sets in near real time with nothing to install.
Directory integration
The SSO server sits in the same domain as Active Directory as the authentication agent, supporting multiple forests and per-location domain controllers. Azure AD is supported as identity provider.
Recognition
Awards, recognition and customer proof.
Earned as CloudCodes, before it joined QSE Corp and became QAuth.
- Recognised by Gartner as a sample vendor for Cloud Security and SaaS Security
- SOC Type-II certified platform
- Gold medal from SoftwareReviews
- Top 10 security solutions — Industry Era
- Recommended for secure remote working environments
- Exhibitor at Gartner Symposium and GITEX Technology Week
“CloudCodes CASB Solutions has given me peace of mind by empowering me with the ability to implement additional security to my Google Apps for my organisation. I would recommend the cloud security solution to everyone who uses Google Apps for Work.”
Case studies
Proven across 20 deployments in 15 industries.
Published as CloudCodes case studies, every one on G Suite, now Google Workspace. Four of them below; all 20 have the full challenge, controls and result.
Aviation
A low-cost airline working across time zones
Single sign-on, a shared login for hand-overs between countries, and two-factor authentication to keep unauthorised users out.
Ecommerce
An online and TV shopping retailer
Password policies, self-service reset and a consumer Gmail block that keeps company email working. Helpdesk tickets fell by around 20–30%.
IT services
A background-screening and verification provider
IP, device and browser restriction per OU, a personal Gmail block, and branded login and landing pages, all from one console.
Education
A high school that wanted its own sign-in page
A custom login page with the school’s branding, alongside Active Directory, so one password works for email and Windows.
Partner program
Build your cloud security practice on QAuth.
Partners choose QAuth because we build and deliver managed cloud services, with the solutions and support they need to simplify their customers’ cloud requirements. Benefits increase as members reach each tier.
Tier
Premier Partner
For partners with superior sales and technical expertise in selling and supporting QAuth. The most extensive benefits and discounts, and an exclusive direct relationship with QSE.
Tier
Reseller Partner
Online sales, marketing, training and education tools to build QAuth knowledge and business, with discounts and benefits from day one.
Sales benefits
- Greater discounts at higher partner levels
- Special pricing campaigns and incentives
- Deal registration with higher margins
- Protected and qualified lead programs
- Volume discounts, collateral and a dedicated partner sales manager
Marketing benefits
- Free co-branding of promotional materials
- QAuth partner logos and a listing on the QSE website
- Campaign materials and partner newsletter
- Customer reference and case study program
- MDF agreed case by case, plus joint PR
Technical benefits
- Pre-launch product evaluations
- Web-based technical training
- QAuth knowledge base
- Priority web chat support
- Dedicated named support contact
FAQ
Frequently asked questions.
Is QAuth the same product as CloudCodes?
Yes. CloudCodes joined the QSE Corp family, and its CASB and single sign-on platform is now called QAuth. Older names you may find, such as gControl and CloudCodes for G Suite, refer to the same platform.
What is a CASB and what challenge does it solve?
A Cloud Access Security Broker sits between your users and your cloud services to enforce security policy. Many newer frameworks lack the breadth organisations need; QAuth covers data protection, access control, identity, DLP and Shadow IT in one platform rather than a collection of point tools.
How does single sign-on work?
SSO joins several application login screens into one. A user signs in once and the service issues an authentication token — like a temporary ID card — that every application checks with the SSO service before letting them in.
What are the advantages of cloud-based access control?
It improves both efficiency and security, especially for organisations with high turnover or multiple sites. Every location and employee is managed from one platform, and rights can be granted or revoked remotely and immediately — including ad-hoc access for suppliers.
How does identity and access management benefit a company?
IAM manages user accounts and access rights for organisations, users and applications. It authenticates users, guarantees the rights they request and automates onboarding, so new joiners are productive immediately.
What is Shadow IT?
The use of systems, devices, software and services without explicit IT approval. It has grown with cloud adoption and can drive productivity, but it also introduces real risk through data leaks and compliance breaches — which is why discovery and governance matter more than blanket blocking.
Does the third-party application block require an add-on or extension?
Yes. The third-party app block and several other control policies are delivered through a browser extension that admins can push centrally via Chrome management.
Can I enforce that employees only use a specific browser?
Yes. Browser restriction lets you whitelist browsers for an OU or a subset of users, so any attempt to reach corporate data from another browser is blocked.
Can one user have more than one device in a device restriction policy?
Yes. A device restriction policy can cover a single user across multiple approved devices.
Outcomes
What customers measure after deploying QAuth.
- Unified visibility and compliance across sanctioned SaaS applications
- Identify and neutralise cloud threats and insider data loss
- Deploy enterprise-grade cloud security in a single integrated platform
Specifications
At a glance.
- Category
- Cloud access security broker (CASB) + SSO
- Supported apps
- Google Workspace · Microsoft 365 · Slack · Jira · Confluence · Dropbox · Salesforce · Zoho · Zendesk · Freshdesk · AWS
- Capabilities
- Access control · CASB · DLP · Email · Zero Trust · Shadow IT · Quantum-enhanced encryption · Compliance & governance
- Deployment
- Agent-based · Agentless · Directory integration (AD / Azure AD)
- Heritage
- Founded 2011 as CloudCodes · Part of the QSE Corp family
Get started
Secure every SaaS app from one console.
The QAuth team will help you with:
- Choosing between agent-based, agentless or both
- Mapping access, DLP and identity policies to your platforms
- Per-user pricing, volume and partner options