Platform
Shadow AI discovery that finds the AI nobody mentioned
Aicura's shadow AI discovery reads the systems that already see what your organisation does, such as sign-ins, devices, cloud accounts and code, and lists the AI tools and services they report. Nothing joins the register on its own. A person decides on every find.
Included in every plan, starting with the free Register plan. Compare plans
Find the AI nobody thought to mention
A team pays for an AI tool on a company card. A vendor switches on an AI feature inside software you already run. A developer adds an AI library to a repository. Asking teams what AI they use catches some of it, and the rest is shadow AI. Discovery looks in the places it shows up, so the register reflects what is running rather than what people remembered.
Every find in one list, waiting for a decision
The queue lists every AI tool and service your connected sources have reported that is still waiting on a decision. Each row shows the name, its identifier in the source, the category, which source reported it and when it was first seen.
Filter by source to work through one at a time, such as developer AI tools reported by device management, in-house code repositories that use AI libraries, or systems recorded in your IT asset database.
See where each find came from and what it probably is
Open a find to see its identifier, category, source, first and last seen dates and how many times it has been seen. The reported detail shows what the source said, such as the device count and the search that matched.
A possible matches panel ranks the products in Aicura's library that it could be, with the reason for each, such as same name, known by this name or similar name. Weak matches are left out.
Four decisions, each recorded with a name and date
- Ignore. The find is dismissed and stays dismissed on later scans.
- Link to existing. The find is matched to a system already on the register.
- Add as AI system or Add as agent. The register form opens, already filled in from the match you picked.
The History tab keeps every decision with who made it and when, filterable by decision and source. Scanning again refreshes the suggestions for anything still waiting. On plans with assessments, a system added from discovery gets its first risk assessment as soon as it joins the register.
You choose the sources, and see every scan they run
The Sources tab lists each connected source with its status, last run and last outcome. Run a scan from a source's page and see everything it has reported and every scan it has made.
- Credentials can be entered but never read back. They are kept in a secret store and never shown again.
- AWS Config needs no stored keys. Aicura uses a read-only role in your AWS account, protected by an external ID, and reads resource details only.
- Scans count against the monthly discovery allowance on your plan.
From Pro, finds from your own traffic
Two more sources need nothing connected in Settings and never need a scan. Aicura feeds them itself from the components you run in your network.
- Gateway traffic. A gateway sends a call to a model that no register entry declares.
- Network traffic. Your proxy or firewall logs show calls to an AI service that no register entry covers and no gateway accounts for. The find shows what the network has seen of the service over the last 30 days.
Connectors
Connect the tools you already run
Every connector below is available from the free Register plan unless it is marked with a higher plan.
Identity and access
- Okta
- Microsoft Entra ID
- Google Workspace
IT service management
- ServiceNow CMDB
- Freshservice
Cloud inventories
- AWS Config
- Azure Resource Graph
- GCP Asset Inventory
Devices and browsers
- Chrome Enterprise
- Microsoft Intune
- Jamf Pro
- Fleet (osquery)
Code
- GitHub
Messaging
- Slack
FinanceEnterprise
- Xero
- QuickBooks Online
- MYOB
Other sources
- Generic connector
- AI Wizard
The AI Wizard covers sources beyond the built-in connectors.
Questions
What is shadow AI?
Shadow AI is AI your organisation uses that appears in no governance record. It is the tool a team pays for on a company card, the AI feature a vendor switched on inside software you already run, the assistant staff sign into with work accounts and the AI library a developer added to a code repository. It carries the same risks as approved AI with none of the oversight.
How does Aicura find shadow AI?
Aicura's shadow AI discovery reads the systems that already see your organisation's activity, such as sign-in providers, device management, cloud accounts, IT service management, code hosting and messaging. On Pro it also reads your own AI gateways and your proxy or firewall logs. Each AI tool or service they report becomes an item in a queue, showing how often it was seen, what the source reported and a ranked list of known products it may be.
Does discovery add things to the register automatically?
No. Aicura's discovery suggests and a person decides. Each find is ignored, linked to a system already on the AI register, or added as an AI system or an agent, and the decision is recorded with who made it and when. A find you ignore stays ignored on later scans.
Is shadow AI discovery free?
Yes. Aicura's discovery scans, queue, history and decisions are in the free Register plan, with a monthly scan allowance that grows with your plan and organisation size. Most connectors are available from the free plan. Finance connectors and the AI Wizard start in Enterprise.
Does discovery read our source code?
No. Aicura connects to GitHub as a GitHub App that your organisation owner installs and can remove from GitHub at any time. It reads Copilot seat counts, AI-related installed apps, and the dependency files that show which repositories use AI libraries. It reads repository and app details, never source code.
See what you are actually running
Create a free account, connect a source and run your first scan. What it finds lands in a queue for you to decide on.