All templates

Automated ExpressVPN Device Audits

Every Monday, WebRun signs in to your ExpressVPN account, reads the devices and activations linked to the subscription, compares them line by line against the approved device list you keep, and reports additions, removals, and anything unrecognised to Microsoft Teams, with a short alert to Telegram when something looks off.

Runs on WebRun · Strict Lockdown policy
Every Monday at 8:00 AM WebRunorchestrates each step
1 ExpressVPN read the device list
2 Microsoft Teams report the reconciliation
3 Telegram alert on anything unrecognised
In short

How do I audit which devices are using our VPN account?

WebRun signs in to ExpressVPN every Monday, reads the devices and activations on your subscription, and reconciles them against your approved device list. It posts additions, removals, and remaining activations to Microsoft Teams, and alerts Telegram only when an unrecognised device appears or you run out of seats.

  • Unrecognised devices are spotted within a week, not at renewal
  • Remaining activations are known before someone hits the limit
  • Read only in the account, so nothing is ever revoked by the run

Built for IT administrators · security teams · small business owners · remote teams

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens www.expressvpn.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    ExpressVPN - read the device list
    expressvpn.com
    WebRun in ExpressVPN: read the device list
    WebRun opens ExpressVPN to read the device list.
    • Sign in to your ExpressVPN account and open the account and devices area
    • Capture every device or activation shown, with its platform and label
    • Note how many activations the subscription allows and how many are in use

    Done when The current device list and remaining activation headroom are captured.

  3. 2
    Microsoft Teams - report the reconciliation
    microsoft.com
    WebRun in Microsoft Teams: report the reconciliation
    WebRun opens Microsoft Teams to report the reconciliation.
    • Post a short reconciliation to your IT channel: devices added, devices gone, and devices unchanged since last week
    • List anything that does not match a name on your approved list as unrecognised
    • State how many activations are left, so nobody discovers the limit at the worst moment

    Done when IT has this week's device reconciliation in Teams.

  4. 3
    Telegram - alert on anything unrecognised
    telegram.org
    WebRun in Telegram: alert on anything unrecognised
    WebRun opens Telegram to alert on anything unrecognised.
    • Send a short Telegram alert only when an unrecognised device appears or activations run out
    • Name the device, the platform, and when it first showed up
    • Removing a device or resetting credentials stays with a human: WebRun never changes the account

    Done when Someone has been alerted about anything that needs a decision.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
www.expressvpn.com
ScheduleRuns automatically on this cadence
Every Monday at 8:00 AM
DeliveryHow each run's result reaches you
Device reconciliation · Microsoft Teams
OutputWhat each run produces - A weekly reconciliation of ExpressVPN devices against your approved list, with additions, removals, unrecognised devices, and remaining activations.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it remove a device or change my subscription?

No. The ExpressVPN step is read only. WebRun lists what it finds and reports it, and removing a device, resetting a password, or changing a plan stays a deliberate human action.

How does it know a device is unrecognised?

It compares the device labels shown on the account against the approved list you maintain. Anything that does not match a known name is reported as unrecognised for a person to confirm or investigate.

Does it send an alert every week?

Teams gets the reconciliation every Monday so there is a record. Telegram only fires when something needs attention: an unrecognised device, or activations running out.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.