A third-party connector is an integration that links one system to another service, such as a SaaS app, API, plugin, or automation tool. It often uses tokens, OAuth grants, or service accounts to move data and trigger actions across platforms. Because it expands what one account or application can reach, it can widen operational exposure if the connector is overprivileged, poorly monitored, or tied to a vendor that is compromised.
In cyber security, connectors matter because attackers often target the easiest bridge, not the strongest server. A stolen connector token can let an intruder read mail, pull files, create rules, or pivot into connected systems without breaking a password policy directly. Defenders reduce this risk by inventorying all integrations, limiting scopes, separating high-risk connectors from core systems, rotating credentials, and reviewing logs for unusual API use. In incident response, checking third-party connectors is a fast way to verify whether an apparent breach came from direct compromise or from a trusted integration abused as an entry point.