SolutionsSecurity & trust

A former employee walks out through an office foyer carrying their work bag.
For security & trust teams

Review social access your leaver process may miss.

SSO offboarding can leave a Meta admin role untouched. Pulse compares approved directory and HR context with recorded social permissions, so platform owners can review access that remains.

The wider credential risk36%

of breaches across industries involved the use of stolen credentials.

The offboarding gap68%

of surveyed IT, security and engineering professionals said they had at some point retained access to a previous employer’s systems after leaving.

Tailscale · 2025 survey

Self-reported survey of 1,000 IT, security and engineering professionals in the US and Canada. Respondents were asked whether they had ever retained access to a previous employer’s infrastructure, systems or software; this is not a social-account-specific rate.

Which social roles survive a leaver review?

Email access may end while an Instagram admin role remains. Marketing, agencies and regional teams grant permissions in separate business managers, and recovery details may sit with an individual. Your security team needs to review the platform roles that a corporate directory cannot revoke on its own.

Leaver access needs a separate check

Offboarding can close email and device access while leaving an older social admin role in place.

Personal identities hold corporate power

An admin role attached to a personal email address needs an explicit owner and review, even when the employee’s corporate login is disabled.

An official account can be misused

If a verified account is taken over, someone can use that trusted channel to send customers malicious links.

Pulse / AcmeIdentity reconciliation · Sample records
Access review / Social estate

Offboarded in the directory.
Still an admin on social.

2 permissions to review
Identity baselineOkta · Entra ID · HR
Pulse reconciliationIdentity × role × asset
Collected social rolesBusiness managers & accounts
  • Priya RamanEmployee · Offboarded
    Platform role: Admin
    Leaver still has access
  • Leah ChenEmployee · Active
    Platform role: Editor
    Matches approved role
  • Sam TaylorAgency · Approved editor
    Platform role: Admin
    Privilege exceeds baseline
Review the mismatch. Confirm the platform change.Directory offboarding ≠ social access removed
Illustrative identity and permission comparison. Acme and the people shown are fictional. Findings require review; no access changes are shown as completed.
Pulse · Account governance

Compare your directory with recorded social roles.

Pulse brings corporate identity, collected platform roles and ranked findings into an access review. See which records differ and what each platform owner needs to check.

Directory → Social role
Identity
priya@acme.example
Lifecycle
Offboarded
Collected role
Meta · Admin
Decision
Review retained access
Identity context makes the finding explainable.
01

Sync your identity context

Bring directory and HR data into the review, then compare employee status and role context with access collected from your business managers. See leavers and role changes alongside the social permissions that still need attention. Available fields and connection methods depend on your identity source.

Permission mismatch
Approved relationshipAgency editorCollected platform roleBusiness admin
Confirm the scope with the account owner.
02

Find the permission mismatch

Match corporate identities to the accounts they can reach. Surface ex-employees, dormant admins, personal email addresses and over-privileged roles. Keep unmatched users and agency relationships visible for investigation.

Ranked review queue
HighLeaver with admin accessOwner: Brand operations
ReviewAgency privilege mismatchOwner: Media operations
Finding → Owner review → Platform remediation
03

Remediate by severity

Use the ranked risk report and step-by-step fixes to prioritise the biggest exposures. Route each finding to the platform owner and bring the review decision into your security control evidence.

Illustrative Pulse records · Acme is fictional.

Works with Radar

Review accounts that may impersonate your brand.

Radar finds suspected impersonation of your brand and people. Review the links, calls to action and audience signals behind each finding. Prioritise higher-risk candidates and progress eligible claims through the relevant platform enforcement workflow.

A suspicious account needs assessment. Keep the finding, submission and confirmed platform outcome distinct.

2,411impersonator accounts removed for adidas in the first 24 hours.

Source: published handles homepage. adidas-specific Radar result, not an outcome of Pulse identity sync or a response-time guarantee.

Explore Radar
@acme_supportPotential impersonation
Observed call to action“Verify your account to keep access.”acme-verify.example/sign-in
Destination
Outside approved domain
Request
Account credentials
Assessment
High-priority review
Platform outcome
Not yet submitted
Illustrative Radar threat candidate. The account and reserved example domain are fictional.
Identity & access controls

The records for a social access review.

  • Cross-platform access audit

    Facebook, Instagram, TikTok, YouTube, LinkedIn and X in one view.

  • IdP & leaver reconciliation

    Directory and HR context compared with live social roles, so leftover access can be investigated.

  • Over-privilege review

    Roles with more access than the relationship needs, identified for review.

  • Personal account exposure

    Non-corporate email addresses and unmatched platform identities, surfaced.

  • Comprehensive risk report

    Findings ranked by severity, with step-by-step remediation.

  • Platform-official integrations

    Connect through official platform integrations. Request handles’ current security and assurance documentation for your vendor review.

From connection to a clear plan

Live in hours

Start with the identity source and social account scope your security team approves, then agree how findings enter your access reviews.

  1. 01

    Connect your business managers

    Use platform-official integrations rather than shared passwords. Connection permissions vary by platform.

  2. 02

    Sync your directory

    Connect Okta, Entra ID or your HR system. Confirm identity matching, lifecycle signals and approved role mappings for the review.

  3. 03

    Get your risk report

    After account connection and identity sync, Pulse can generate your first ranked findings within hours. Platform owners can review each issue and its recommended fix; insights grow as more data is collected.

Brand protection & governance in practice

Published proof from adidas brand protection.

licensed handles identified and aligned
250+
social accounts removed in the first phase
9,000+
followers in the protected audience
100M+

These are published results from adidas brand protection and governance. They are not a measured outcome of Pulse identity sync or a promise of the same result for another customer.

Read the adidas story
Bring social roles into access reviews

Bring social roles into your access reviews.

Compare approved identity records with observed account permissions. Give each flagged role an owner and a clear review step.

Speak to the team