Material Security

Material treats Gmail, Drive, and Outlook as the production environment: it redacts sensitive mail, gates risky OAuth, and hunts post-compromise activity after MFA has already been bypassed. The product is API-based, so there is no MX cutover.

Research on zombie OAuth tokens and real incidents like Composio is how they argue that inbox security is now identity and data access, not just phishing.