Notifications
Clear all
Topic starter
02/08/2026 9:47 am
TL;DR: Shadow AI spreads through browser tabs, extensions, locally spun-up MCP servers, and sanctioned apps before security teams can inventory or govern them, creating exposure across data, compliance, and identity controls according to Akto. The real issue is not adoption itself but the collapse of pre-AI governance assumptions around visibility, approval, and enforceable policy.
NHIMG editorial — based on content published by Akto: Shadow AI Visibility: How Security Teams Govern Employee AI Usage
By the numbers:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, 46% confirmed and 26% suspected.
- When AWS credentials are exposed publicly, attackers attempt access within an average of 17 minutes, and as quickly as 9 minutes in some cases.
Questions worth separating out
Q: How should security teams discover shadow AI agents in the enterprise?
A: Use endpoint artefacts first.
Q: Why do AI tools create more identity risk when they connect to production data?
A: AI tools create more identity risk because they can be granted broad, reusable access to systems that hold sensitive data, often before the security team has reviewed the exact workflow.
Q: What do security teams get wrong about shadow AI governance?
A: They often treat shadow AI as a banned-app problem when it is usually an identity and accountability problem.
Practitioner guidance
- Inventory AI across endpoint, browser, and IDE surfaces Build discovery that finds sanctioned copilots, unsanctioned chat tools, local AI apps, browser extensions, autonomous agents, and MCP servers.
- Map every AI tool to the data it can reach Link each AI system to source code, PII, financial data, internal knowledge bases, cloud storage, and retrieval pipelines.
- Treat MCP servers as first-class identity assets Require ownership, authentication review, and periodic access validation for local and third-party MCP servers.
What's in the full article
Akto's full blog covers the operational detail this post intentionally leaves for the source:
- Step-by-step Shadow AI discovery workflow across browsers, endpoints, IDEs, and local machine contexts
- Operational examples of AI data-flow mapping for SaaS connections, internal databases, and RAG pipelines
- Practical policy categories for role-based access, data-aware controls, and tool-level governance
- Runtime enforcement patterns for blocking, warning, or redacting unsafe AI interactions
👉 Read Akto's analysis of Shadow AI visibility and employee AI governance →
Shadow AI visibility and governance: what IAM teams need to do?
Explore further
02/08/2026 12:39 pm
Shadow AI is an identity governance failure before it is a visibility problem. The governance model assumed by most enterprises is that access is mediated by approved systems, logged through sanctioned controls, and owned by a recognisable business process. Shadow AI bypasses that sequence because employees can create AI-enabled access paths without procurement, review, or lifecycle oversight. The implication is that identity governance now has to account for unsanctioned runtime access, not just formally provisioned accounts.
A few things that frame the scale:
- The average organisation believes more than 1 in 5 of their non-human identities are insufficiently secured, according to The 2024 ESG Report: Managing Non-Human Identities.
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities, with 46% confirmed and 26% suspected.
A question worth separating out:
Q: Who should own revocation when an employee leaves and AI tools still have access?
A: IAM and security operations should treat AI-connected permissions like any other lifecycle-managed entitlement. If an extension, agent, or MCP server can still reach company data after offboarding, it should be revoked through the same process used for other non-human identities and privileged access paths.
👉 Read our full editorial: Shadow AI visibility is the first step to enforceable AI governance
