GreyScape.ai Shadow-AI Detector

About

GreyScape.ai Shadow-AI Detector

A detection-only browser extension for IT and security teams. Watches a curated allow-list of AI tool domains and reports usage events back to your GreyScape.ai tenant.

What it does

Detects when employees visit AI tool websites on managed devices and sends one heartbeat per (tool × day × user) to your GreyScape.ai admin tenant. The heartbeat includes the tool name, the day, the user's hashed email for attribution, and the extension version. Nothing else.

What it never does

- Never reads prompts, responses, or any page text
- Never captures keystrokes, screenshots, or DOM snapshots
- Never reads browser history, cookies, or saved passwords
- Never tracks activity on non-AI domains (the allow-list is the entire scope)
- Never loads remote code (Manifest V3 only, no eval, no native messaging)

Designed for enterprise IT

- Manifest V3 
- Token-based tenant binding — one token per device fleet, revocable from your GreyScape.ai admin console
- MDM-ready:  can force-install with the tenant token pre-loaded via storage.managed policy
- Privacy-preserving user attribution via SHA-256 hash of work email (raw email never leaves the device)
- Daily de-duplication on the server — the heartbeat is idempotent, so a chatty extension doesn't pollute the dashboard

Why detect shadow AI?

Most enterprise AI governance tools see only what corporate IT sanctioned — admin API keys. They miss the long tail of consumer-tier AI on personal accounts:  Detecting this layer requires either network-gateway inspection (heavy infrastructure) or a lightweight browser extension (this).

About GreyScape.ai

GreyScape.ai is the AI governance platform for IT, FinOps, and Finance teams. We discover every AI tool in use across an organisation and govern the spend with budgets, attribution, and approval workflows. Operated by KARRD Services FZCO, registered in IFZA Business Park, Dubai Silicon Oasis, UAE.

Learn more at https://greyscape.ai
Privacy policy: https://greyscape.ai/legal/privacy
Sub-processors: https://greyscape.ai/legal/subprocessors