All templates

Automated Box Shared Link Auditing

Every Monday, WebRun opens Box, reviews the shared links and external collaborators on the folders you nominate, flags anything open to the public, anything with no expiry date, and anyone outside your domain, posts the findings to Microsoft Teams, and opens a Trello card for each link a human needs to review.

Runs on WebRun · Strict Lockdown policy
Every Monday at 8:00 AM WebRunorchestrates each step
1 Box review shared links and collaborators
2 Microsoft Teams post the risky sharing list
3 Trello open a card per link to fix
In short

How do I audit who can access my Box files each week?

WebRun reviews your Box sharing every Monday. It walks the folders you nominate, lists public links, links with no expiry, and collaborators outside your domain, posts the ranked findings to Microsoft Teams, and opens an assigned Trello card for each item, so open access gets fixed instead of forgotten.

  • Public links with no expiry are named every Monday
  • New external access is flagged the week it appears
  • Every fix has an owner and a card, not a mention in a meeting

Built for IT administrators · compliance teams · legal operations · professional services firms

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens app.box.com/login in a real browser with your saved login - no setup, no API keys.

  2. 1
    Box - review shared links and collaborators
    box.com
    WebRun in Box: review shared links and collaborators
    WebRun opens Box to review shared links and collaborators.
    • Open Box and walk the folders you nominated for review
    • Capture every shared link, its access level, and whether it has an expiry date or password
    • List external collaborators whose email is outside your own domain, with the folder they can reach

    Done when Every shared link and external collaborator on the watched folders is listed.

  3. 2
    Microsoft Teams - post the risky sharing list
    microsoft.com
    WebRun in Microsoft Teams: post the risky sharing list
    WebRun opens Microsoft Teams to post the risky sharing list.
    • Post the findings to your IT or operations Teams channel
    • Lead with links open to anyone with the link and no expiry, then external collaborators on sensitive folders
    • Note what changed since last week so a new exposure is obvious

    Done when The team channel has this week's sharing review with the riskiest items first.

  4. 3
    Trello - open a card per link to fix
    trello.com
    WebRun in Trello: open a card per link to fix
    WebRun opens Trello to open a card per link to fix.
    • Open a Trello card for each link or collaborator that needs a human decision
    • Put the folder path, the current access level, and the suggested change in the card
    • Assign the card to the folder owner and skip anything that already has an open card

    Done when Every item needing action has one assigned Trello card.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
app.box.com/login
ScheduleRuns automatically on this cadence
Every Monday at 8:00 AM
DeliveryHow each run's result reaches you
Sharing review · Microsoft Teams
OutputWhat each run produces - A weekly sharing review listing public links, links with no expiry, and external collaborators, each with its folder, owner, and the change to make.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it remove access or delete links in Box?

No. WebRun reads sharing settings and reports them. Revoking a link, adding an expiry, or removing a collaborator is a human decision, made by the folder owner from the Trello card WebRun opens.

Which folders does it check?

Only the ones you nominate. Point WebRun at your client, finance, or contract folders and it walks those, so a large Box account does not turn into a hundred-page report every Monday.

How do I see what changed this week?

The Teams post compares the current run against the previous one and calls out new public links and newly added external collaborators, so a fresh exposure stands out from the standing list.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.