Shadow AI FinderFind the AI your company already uses
Drop in a DNS, proxy, firewall or sign-in log export. You'll see which AI services show up (chat assistants, coding assistants, model APIs, meeting recorders and more), how often, and by how many people or devices.
Your files never leave your browser. The page reads them on your computer and is blocked from making network requests, so nothing is uploaded.
Drop log files here or
CSV, TSV, TXT, LOG or JSON. Several files at once is fine. Large files are read line by line.
Or paste lines instead
A scan is a snapshot
This shows one export at one moment. Agent Trust Cloud keeps an inventory of every AI agent, who owns it and what it can reach, and applies your policy before an agent acts. You can start with Discover, the free, monitor-only tier.
Start free with Discover What shadow AI is, and what to do about it
Which exports work
- DNS logs — Windows DNS server debug logs, Pi-hole, BIND query logs, or DNS logs exported from a secure web gateway.
- Proxy and web gateway logs — any export with the visited host or URL in it.
- Firewall URL logs — exports that include the destination host name.
- Sign-in exports — CSVs with an application column, where AI apps are signed into with company accounts.
The finder looks for host names anywhere in each line. If your file has a header row with a user, email or device column, it counts distinct people or devices per service too.
What it recognises
Browse the domains each service uses, with ready-to-copy block and allow lists for hosts files, dnsmasq, Unbound, BIND, Pi-hole and Squid. Or download them all as CSV or JSON.
What it can't tell you
A visit to a service's domain shows traffic, not what was typed or shared. Services reached from personal devices or home networks won't be in company logs. The list of services is reviewed monthly and won't cover every tool.
Questions
Is my log uploaded anywhere?
No. The page's security policy blocks all outgoing requests (connect-src 'none'). Files are read on your computer and disappear when you close the tab.
How big a file can it handle?
Files are read line by line, so hundreds of megabytes work on a normal laptop. Very large exports will take longer.
Should we block everything it finds?
Usually not. Most teams approve a few tools, review the rest and block a small number. Mark each service below and export the list for IT.