Definition
The process of automatically detecting AI tools, agents, and model connections that employees or teams have deployed without formal IT or security approval — the AI equivalent of 'shadow IT'. Because AI tools are easy to connect to business data through browser extensions, API keys, and unofficial integrations, organisations routinely have far more AI in use than they know about.
Why it matters
Unsanctioned AI tools handling sensitive business data represent an unmanaged compliance and data-leakage risk; you cannot govern what you cannot see. Passive network-level discovery (as shipped by F5 and others) is emerging as the only reliable way to find shadow AI that intentionally avoids endpoint agents.