{"version":"0.42.0","built_at":"2026-11-01T08:34:43.408Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","category":{"id":"TR-100.80","name":"Shadow AI Discovery & Prompt DLP","description":"Tools that find which public AI services employees use and what data they send to them, and apply policy in the browser, on the endpoint or at the network edge to allow, coach, redact or block.","aliases":["GenAI Usage Security"],"in_scope":["Discovery of sanctioned and unsanctioned AI tools in use","Inspection of prompts and uploads for sensitive data","Allow, coach, redact and block policies","Usage reporting by tool and team"],"out_of_scope":["Protecting AI applications the organization builds and runs (see TR-110.80)","Sign-in and access to sanctioned AI tools (see TR-100.10)","Routing and key custody for internal model calls (see TR-60.60)","Secure access service edge platforms as a whole (see TR-30.20)"],"capability_ids":["BC-760.50.60","BC-760.50.40"],"examples":["Harmonic Security","Prompt Security","Netskope One","Palo Alto Networks AI Access Security","Cisco Secure Access"],"domain_id":"TR-100","domain":"Security & Identity","page_url":"https://catalog.mikereams.com/technology/TR-100.80","business_capabilities":[{"id":"BC-760.50.60","name":"Workforce AI Use Oversight"},{"id":"BC-760.50.40","name":"Data Loss Prevention"}],"technology_ids":[]},"domain":{"id":"TR-100","name":"Security & Identity","description":"Proving who and what is acting, protecting systems and data, and spotting attacks early enough to stop them.","category_ids":["TR-100.10","TR-100.20","TR-100.30","TR-100.40","TR-100.50","TR-100.60","TR-100.70","TR-100.80"],"page_url":"https://catalog.mikereams.com/technology#TR-100"},"technologies":[]}