Mine finally did too at the end of last year! Apparently they had checked Postman back in the day when it didn’t require a login and deemed it fine, but totally missed their move into being a cloud service.
I had to prod the Cloud Service Security guy for months until he finally took a look at it
My company banned the use of postman for a few years now.
If it requires a login, you can be sure it is scraping everything it can.
Mine finally did too at the end of last year! Apparently they had checked Postman back in the day when it didn’t require a login and deemed it fine, but totally missed their move into being a cloud service. I had to prod the Cloud Service Security guy for months until he finally took a look at it