detectify

Your Friendly Slack Bot Might Be Exposing Your Company's Conversations

Sloppy developers are leaving tokens in their public bot code that would let others listen in on company conversations and pull sensitive data.