Use the Risk Report in Protect

The Risk Report in Dropbox Protect is a dashboard on the home page that gives team admins a high-level summary of content access risks across their organization. It helps admins prioritize risks and recommends actions to address the most critical issues first.

Learn more about risk categorization.

How to access the Risk Report

Log in to your account at dropbox.com/protect/app. The report appears on the home page. 

How to read the Risk Report

Risk overview

The risk overview highlights key risk metrics across your connected apps. This gives you a snapshot of your organization’s overall content access risk without needing to review individual items.

Items are grouped by risk level so you can focus on the most critical issues first. Learn more about how risk is calculated. 

Click the Critical, High, or Medium card to review items in that category, apply additional filters, and fix the risks.  

External sharing sources

See the breakdown of how external users are accessing your content. Items shared externally can fall into the following categories:

• Public links: Items that anyone on the internet with the link can access.
• Personal accounts: Items accessible to personal or educational email accounts, such as Gmail, Yahoo, or school accounts.
• Outside access: Items that can be accessed by accounts outside your organization, excluding personal or educational accounts.

You can see the breakdown in the graph or by percentage. Click a category in the breakdown to review items in that category, apply additional filters, and fix the risks.

Exposure to AI tools

Public links and company links put your items at risk of appearing in AI tools. 

• Public links: Items that anyone on the internet with the link can access.
• Company links: Items that anyone in your organization with the link can access.

Clicking Public links or Company links to review items that AI tools may be able to access, apply additional filters, and fix the risks.

Stale content

Stale content refers to items that haven’t been modified within a specified timeframe. You can see stale content organized into the following categories: 

• Public links: Items that anyone on the internet with the link can access.
• Personal accounts: Items accessible to personal or educational email accounts, such as Gmail, Yahoo, or school accounts.
• Outside accounts: Items that can be accessed by accounts outside your organization, excluding personal or educational accounts.
• Company links: Items that anyone in your organization with the link can access.

Select a timeframe from the dropdown menu above the graph. Click a category below the graph to review items in that category, apply additional filters, and fix the risks.

Top risky items

This section lists the items most at risk of exposure, with the following details:

• Item name and source path
• Shared link type
• Risk level
• Data classification (if applicable)
• Suggested action to fix the risk

Select a risk level from the dropdown menu above the list. Learn more about how risk is calculated. 

Click Remove links to view the item’s details, or View all below the list to review items in that category, apply additional filters, and fix the risks.

Recommendations

The report provides targeted recommendations to help you reduce risk. Recommendations may include:

• Removing public links
• Removing company-wide links
• Removing outside access 
• Removing personal accounts
• Reviewing items with broad internal sharing

Click the suggested action to review the affected items before applying the fix.