A recent enquiry led me to find a piece of software by sysinternals called AccessEnum (Access Enumerator). This tiny tool will scan the contents of a directory and list the permissions for all subfolders and files.
You can then export this list to a text file for analysis.
Unless I’m using it wrong, this tool only shows files/folders that have different security to their parent folders. It’s not like showacls which shows the whole hierarchy.