Automize uses two Microsoft apps of its own. If you have been asked to approve one, its page below has the details to check: the application (client) ID Microsoft shows you, every permission and why we ask for it, what we keep, and how to remove it. Every other connector uses an app your organisation registers itself.
Write to security@automize.co.za. To report a vulnerability, see Security Disclosure.