Shadow AI agents are multiplying. Here's how to find and secure them.
Summary
Shadow AI agents (autonomous AI systems that take actions without human approval) are spreading across companies through platforms like Salesforce Agentforce, Microsoft Copilot Studio, and Zapier, often without IT oversight. Unlike simple chatbots, agents hold persistent permissions to access corporate systems and data, making them riskier when unmanaged. The text emphasizes that IT and security teams struggle to find and govern these agents because they're created quickly and often on platforms without public data access.
Solution / Mitigation
Nudge Security offers two discovery methods to find shadow AI agents: API-based discovery connects to platforms that expose agent data (Salesforce Agentforce, Microsoft Copilot Studio, Google Gemini, ServiceNow, n8n, Tines, ChatGPT, Abacus.AI, and Workato) to continuously pull agent details and risk insights, and browser-based discovery through a Nudge Security browser extension covers platforms without APIs (Cursor automations, OpenAI Agent Workflows, ChatGPT workspace agents, Zoom AI Workflows, Atlassian Rovo, Retool, Zapier Agents, and HyperAgent) by passively observing when employees create or view agents and automatically adding them to inventory with creator, connected apps, permissions, and risk signals attached.
Classification
Affected Vendors
Related Issues
Original source: https://www.bleepingcomputer.com/news/security/shadow-ai-agents-are-multiplying-heres-how-to-find-and-secure-them/
First tracked: July 27, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 85%