Tools · Shadow-AI discovery
Shadow AI discovery tools
Shadow AI is AI tooling employees adopt without approval: chat assistants, coding agents, browser extensions, MCP servers and API keys doing real work with no inventory or audit trail. These products find that use from browser, endpoint, network, identity or SaaS signals, tie it to the people and data involved, and enforce policy, from a warning in the browser to a block. A team needs one before it writes or enforces an AI policy, because a policy only governs the tools someone knows about.
Shadow-AI discovery 7
-
AI Access Security (vendor site, opens in a new tab)
generally availablePalo Alto Networks on the vendor map
Shows which GenAI apps employees use and lets admins set access controls, threat protection and data loss prevention policies for them.
-
Grip AI Security (vendor site, opens in a new tab)
generally availableGrip Security on the vendor map
Maps AI tools, agents and SaaS apps in use to the identities and data they touch, ties actions to a person or agent, and applies targeted guardrails and automated responses to risky behavior.
-
Island Enterprise AI (vendor site, opens in a new tab)
generally availableInventories AI tools, agents, MCP servers, skills and non-human identities from the browser, endpoint and network, and audits prompts, responses and tool calls. It blocks prompt injection and unauthorized Bash commands inline, issues just-in-time access in place of standing credentials, and tracks AI cost per person and agent.
-
Nudge Security AI governance (vendor site, opens in a new tab)
generally availableNudge Security on the vendor map
Finds AI apps, accounts, agents and data integrations, including MCP and API connections to SaaS data, without proxies or endpoint agents. It profiles each AI vendor's security, flags uploads and pastes of sensitive data into chatbots, and enforces AI policies in the browser.
-
Pluto (vendor site, opens in a new tab)
generally availablePluto Security on the vendor map
Discovers the AI tools, agents, skills, extensions and MCP servers employees adopt or build, rates each against Pluto's own risk research, and enforces intent-based policies such as blocking an action, quarantining an untrusted MCP server or requiring approval for payment API access.
-
Reco Agent Security (vendor site, opens in a new tab)
generally availableDiscovers agents across ChatGPT, Claude, Copilot and SaaS apps, maps each agent's owner, apps and connections, flags misconfigured and unapproved agents, and produces compliance reports aligned to the EU AI Act, ISO 42001 and SOC 2.
-
Workforce AI Security (vendor site, opens in a new tab)
generally availableDiscovers shadow AI across AI apps, browser extensions, desktop agents, IDEs and MCP-connected tools, and sets policy by app, user, data type and action to stop sensitive data reaching AI tools.
Recent launches
- AWS Agent Registry · generally available
- MCP traffic detection and portal enforcement in Cloudflare Gateway · beta
- Island controls for AI agents (Agentic Endpoint Posture, Agentic Identity, AI Protect) · generally available
Announced in the last 90 days. Each launch on New tools links the vendor's own announcement.
The briefing
New AI agent governance tools, by email
The briefing's New Tools section covers the latest governance launches, each linked to the vendor's announcement, next to the news that decides which ones matter. At least once a week, five-minute read, free.
You confirm by email. Unsubscribe in one click.
Questions to ask vendors
Neutral questions for a request for proposal (RFP) or a security questionnaire. No product here is named as the answer.
-
How is usage discovered: network traffic, single sign-on logs, browser telemetry, endpoint agents, or expense data? Each source misses different things.
-
Can it see API keys and command-line tools, or only web apps? The riskiest shadow AI rarely runs in a browser tab.
-
Can it distinguish sanctioned tools from unsanctioned use of the same tool, such as a personal account for an approved product?
-
What is the enforcement posture: observe, warn, or block, and can it steer employees toward an approved alternative instead of a dead end?
-
How is employee privacy handled? Monitoring that reads message content creates its own governance problem.
-
Does discovery feed an inventory you own and can export, or a dashboard you rent?
More questions, grouped by topic: Questions to ask AI agent security vendors.
Related incidents
- A tl;dv misconfiguration exposed government and corporate meeting data
- Grok Build uploaded whole directories, including SSH keys, by default
- Claude shared chats and Artifacts turned up in Google's index
- AI coding agents exposed 13,000 internal images, including billing records, on GitHub
Every record in the AI agent incident database links the sources that reported it.
Missing a product, or found an entry that is out of date? Write to [email protected]. A submission is read, never paid for, and does not guarantee a listing. The glossary defines the terms used here.