Skip to content
Blueprint Catalog

    ↑↓ move · Enter open · Esc close

    11 — Technology category · TR-100.80

    Shadow AI Discovery & Prompt DLP

    Tools that find which public AI services employees use and what data they send to them, and apply policy in the browser, on the endpoint or at the network edge to allow, coach, redact or block.

    • GenAI Usage Security

    In scope

    • Discovery of sanctioned and unsanctioned AI tools in use
    • Inspection of prompts and uploads for sensitive data
    • Allow, coach, redact and block policies
    • Usage reporting by tool and team

    Out of scope

    • Protecting AI applications the organization builds and runs (see TR-110.80)
    • Sign-in and access to sanctioned AI tools (see TR-100.10)
    • Routing and key custody for internal model calls (see TR-60.60)
    • Secure access service edge platforms as a whole (see TR-30.20)

    Example technologies · 5

    Well-known technologies in this category, named as facts. Not a shortlist or an endorsement.

    • Harmonic Security
    • Prompt Security
    • Netskope One
    • Palo Alto Networks AI Access Security
    • Cisco Secure Access

    Realizes · 2

    Elsewhere in Security & Identity