All templates

Automated iCloud Shared Access Audit

Every Monday, WebRun signs in to iCloud, walks your shared iCloud Drive folders, share links, and shared albums, lists who is on each one, writes the audit into Notion, and drafts you a Gmail summary of the shares that look stale or reach outside your people.

Runs on WebRun · Strict Lockdown policy
Every Monday at 9:00 AM WebRunorchestrates each step
1 iCloud list every share and its participants
2 Notion record the access audit
3 Gmail draft the shares worth closing
In short

How do I check who still has access to my shared iCloud files?

Every Monday, WebRun signs in to iCloud and walks your shared iCloud Drive folders, share links, and shared albums, listing who can open each one. It records the audit in Notion with outside participants flagged and drafts a Gmail summary of the shares worth closing. WebRun never revokes access itself.

  • Every share is reviewed weekly instead of when something goes wrong
  • Open-to-anyone links are surfaced by name and item
  • Old collaborators still on a folder are named, not guessed at

Built for small business owners · families · IT and ops leads · consultants sharing client files

Step by step

What does WebRun do on every run?

The exact actions WebRun takes, in order - in plain language, so you can adjust anything.

  1. WebRun signs in and gets to work

    Opens www.icloud.com in a real browser with your saved login - no setup, no API keys.

  2. 1
    iCloud - list every share and its participants
    icloud.com
    WebRun in iCloud: list every share and its participants
    WebRun opens iCloud to list every share and its participants.
    • Sign in to iCloud and open iCloud Drive
    • Go through the shared folders and files and read the participants on each
    • Note which shares are open by link to anyone and which are limited to named people
    • Check shared albums and list their participants too
    • Read only. Never remove a person, revoke a link, or delete a file

    Done when Every shared folder, file, and album has its participants listed.

  3. 2
    Notion - record the access audit
    notion.so
    WebRun in Notion: record the access audit
    WebRun opens Notion to record the access audit.
    • Write one row per share into your access audit database
    • Record the item, the type of access, each participant, and their email domain
    • Flag participants outside the domains you count as internal
    • Flag link shares that are open to anyone with the link
    • Mark rows that changed since last week

    Done when The Notion audit shows this week's sharing picture with outsiders flagged.

  4. 3
    Gmail - draft the shares worth closing
    gmail.com
    WebRun in Gmail: draft the shares worth closing
    WebRun opens Gmail to draft the shares worth closing.
    • Draft an email to yourself listing the shares worth closing and why
    • Put the open-to-anyone links and the outside participants at the top
    • Leave the email as a draft. Never write to a share participant or revoke access

    Done when A review summary is drafted and waiting in Gmail.

Run settings

How is each run configured?

Starting pageWhere Chrome opens at the start of each run
www.icloud.com
ScheduleRuns automatically on this cadence
Every Monday at 9:00 AM
DeliveryHow each run's result reaches you
Access audit · Notion
OutputWhat each run produces - Every shared iCloud folder, file, link, and album with its participants, their email domain, and a flag on the ones reaching outside your people.
Text
Setup & safety

Secure by default

Connect once, stays signed in

WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.

Your credentials stay in your own private environment - WebRun never stores your passwords.
Strict Lockdown

Every action is checked against this policy before it runs.

Domains ALLOWLIST
Typed input ALLOW
Shell command BLOCK
File uploads BLOCK
Runs in a contained environment More on policies
Good to know

Questions, answered

Will it revoke access or stop sharing?

No. WebRun reads your sharing settings and reports them. Removing a participant or turning off a share link is always done by you in iCloud, so nobody loses a file they still need.

Does it email the people I shared with?

No. The only email is a draft addressed to you, and it is left unsent. Share participants are never contacted and never told an audit happened.

How does it know who is an outsider?

By email domain. You tell WebRun which domains count as your household or company, and every participant outside that list is flagged in the Notion audit with their domain shown.

Put this on autopilot.

Turn it on in minutes - or have our team set it up for you.