Skip to main content

Product Release Note - August 2025 - New Token Protection Policy

D
Written by David McCandless
Updated over a week ago

Compromised tokens are one of the hardest SaaS threats to defend against, and a leading cause of data breaches. A stolen session token lets attackers bypass MFA, Conditional Access, and other defences to reach your sensitive data.


The new 🔐Token Protection Policy🔐 closes that gap.

It creates a cryptographically secure tie (client secret) between the token and the device when your Entra joined or registered device accesses Exchange or Sharepoint Online. This means a stolen token is useless when another device tries to use it for authentication.

Enable this immediately via Overe in seconds Read More

📜 Upgrading the Policy UI

We're now grouping policy controls by attack vector, highlighting new policies and giving you a better visual understanding of the state of your tenant.

Policy2

At Overe, we are powering through our Roadmap and we're putting our focus on Policies and Reports so that you can more easily secure your tenants and also see exactly how they're being protected in each area of Overe

Did this answer your question?