Appsheet Core Security Cons/Risk of turning it off

AppSheet AppSheet Q&A
, ,
1

Hi fellow creators!

I recently just made a bot in my appsheet that should send an email to my clients.

I just noticed that when the recipient is outside my domain, the automation doesnt work and gives me an error. I contacted google support to which suggested that I turn off the Appsheet Core Security as this would allow me to send an email to external domains.

Now, since this is related to security, what are the cons/risks of me turning this off? I’m very new to Appsheet and I don’t want my data to be compromised.

Thank you.

2

Turning off AppSheet Core Security does come with certain risks, so it’s great that you’re thinking this through before making changes. Here are some key things to consider:

Cons/Risks of Turning Off Core Security:

  1. Less Control Over Data Access

  • Core Security helps restrict data access based on your domain, meaning only authorized users can interact with your app and its automation. Disabling it might expose your app’s functionality to unintended recipients or attackers.1. Potential Unauthorized Email Sending

  • If your AppSheet bot can send emails to external domains, bad actors could potentially abuse this if they gain access. This could lead to phishing attacks or your email being marked as spam.1. Security Compliance Issues

  • If your app deals with sensitive or business-critical information, disabling security settings could violate data protection policies (especially if your business follows GDPR, HIPAA, etc.).1. Higher Risk of Data Breaches

  • If your app handles confidential information, allowing external communication could increase exposure to breaches, especially if other security measures are weak.

Safer Alternatives:

  • Check Google Workspace Settings:

  • Instead of disabling Core Security, check your Google Workspace admin settings to see if you can whitelist external domains for email sending.- Use an Approved Email Service

  • Limit External Email Domains:

  • If you need to send emails outside your domain, try limiting the allowed domains instead of opening it up completely.

Would you like help configuring an alternative way to send emails securely

2 Likes