Skip to main content

Overview

By integrating with Google Drive, the service can detect the visibility status of Google Forms. This enables you to detect and manage forms that are unintentionally exposed to external users.

How detection works

Forms are automatically detected through integration with Google Drive. For detailed integration instructions, see the article below. Google Drive integration

Detection criteria

Public forms that meet the following conditions are detected and reported as alerts. Detection is determined by the combination of the form’s edit permission, response permission, and result summary setting. For details, see External Sharing Content Management.
Service detection / Google Form settingsEdit permissionAnswer permissionResult (show result summary)
Detected as fully publicPublicPublicOn
Detected as fully publicPublicPublicOff
Detected as fully publicPublicInternalOn
Detected as fully publicPublicInternalOff
Detected as fully publicInternalPublicOn
Detected as shared (external)Limited SharingPublicOff
Detected as shared (external)Limited SharingInternalOn
Detected as shared (external)Limited SharingInternalOff

Terminology

TermDescription
PublicAccessible to everyone on the web
Limited SharingShared with specific external members
InternalShared only with members in the Google Workspace organization

Show response summary

This refers to whether the Google Form’s “Show result summary” option is enabled.
When a user submits the form, a link to the form’s results appears. The response summary shows the full text of each answer and charts. Any user who can respond to the form can view these summaries.
For details, see Google Docs Editors Help.
  • How to export Google Drive files using the API
  • How to specify file detection criteria
  • How to resolve false positives in external sharing detection
Last modified on July 7, 2026