GrantDecay

GrantDecay is a tool designed to identify unused permissions within an organization by analyzing entitlement and access log exports over a specified observation window. It provides four distinct findings related to unused permissions and roles, ensuring that findings depend on a meaningful time frame to mitigate the risk of prematurely removing critical permissions. The tool operates solely on local files, allowing for a safe and straightforward audit of privilege surfaces without connecting to external services.