Google Docs Add-on

Run security design reviews on a Google Doc without leaving it, using the DevArmor Google Workspace Add-on.

Overview

The DevArmor Google Workspace Add-on brings design reviews into Google Docs. Open the add-on from a doc, pick or create a DevArmor project, and run a security design review on the document's contents — findings and requirements show up right there in the sidebar, without leaving Google Docs.

Integration Type

DevArmor is published on the Google Workspace Marketplace as a Workspace Add-on (a CardService-based sidebar), not an Editor Add-on. It's installed like any other Workspace Marketplace app — by a Workspace admin for the whole domain, or by an individual user for themselves.

Permissions requested at install:

• Read/write access to the currently open document only (Google's drive.file scope — DevArmor never sees other files in your Drive)

• Your email address, to match you to your DevArmor organization

• Permission to call the DevArmor API from within the add-on

How It Works

DevArmor recognizes your organization automatically from your Google Workspace email domain — no manual configuration is needed. If your organization's domain isn't yet set up in DevArmor, the add-on shows a welcome card instead of the review workflow, with a link to sign up.

1. Open the add-on from the side panel in a Google Doc.

2. The first time DevArmor needs to read this document, grant it access — access is limited to the current file only.

3. Pick an existing DevArmor project, or create a new one directly from the doc.

4. Click Run Security Review. DevArmor reviews the document's contents against your organization's threat model.

5. While the review runs, the sidebar shows an estimated completion time; check status or open progress in the DevArmor web app at any point.

6. Once complete, the sidebar lists the resulting security requirements — click one to open it in DevArmor, or delete ones that don't apply.

You can re-run the review at any time (for example, after editing the document) with Re-Run Security Review, or switch to a different project with Change project.

Prerequisites

• A DevArmor organization whose sign-up matches your Google Workspace email domain

• A Google Workspace account — personal Gmail accounts aren't supported, since the add-on recognizes you by your organization's domain

Installation

1. Install DevArmor from the Google Workspace Marketplace, either as a Workspace admin (for the whole domain) or as an individual user.

2. Open a Google Doc and open the DevArmor add-on from the side panel.

3. If your organization isn't recognized yet, follow the sign-up link on the welcome card.