Shadow AI is the AI your organisation uses without it appearing in any governance record, meaning the tool a team subscribed to on a corporate card, the AI feature a vendor switched on inside software you already run and the assistant staff sign into with their work accounts. It carries the same risks as registered AI with none of the oversight, and most organisations underestimate how much of it they have.

How does Aicura find shadow AI?

Aicura pulls signals from the sources that already see your organisation's activity, including identity providers, device management, cloud inventories, IT service management, code hosting and workspace tools, then correlates them. A sign-on from your identity provider, an AI SDK in one of your repositories and an application on managed devices resolve into one suggestion rather than three mysteries.

Does discovery put things into my register automatically?

No. Discovery produces suggestions, and a person decides. Each suggestion is accepted into the AI Register, dismissed or held for later, and the decision is recorded. Your register stays a record your organisation stands behind rather than a scan output.

Is discovery only in the paid tiers?

No. Discovery scans, the suggestion queue and discovery decisions are included from the free Register tier, with monthly scan allowances that grow with each band and tier. Most connectors, including identity, device, cloud, ITSM, code and workspace sources, are available from the free tier, with finance and network egress joining at Pro. You can see what your organisation is running before you pay anything.

Find the AI nobody registered

Aicura discovers the AI your organisation actually runs, correlating signals from identity, device, cloud, code and workspace sources into suggestions a person accepts into your AI Register. Included from the free Register tier.

Start your free register

A register is only as true as what it misses

Every AI governance program rests on one question. What AI do we actually run? Asking teams to self-report answers part of it. The rest is shadow AI, meaning the tool a team subscribed to on a corporate card, the AI feature a vendor quietly switched on, the assistant staff sign into with their work accounts. It carries the same risks as the AI you know about, with none of the oversight.

Aicura's discovery goes looking for it. It reads the sources that already see your organisation's activity and turns what they see into suggestions for your AI Register, so the register reflects what is running rather than what people remembered to mention.

Signals from the systems you already run

Discovery connects to the sources below and correlates what they report. A sign-on from your identity provider, an AI SDK in one of your repositories and an application appearing on managed devices resolve into one suggestion rather than three separate mysteries, so the queue you review is short and specific rather than a wall of raw hits.

Identity and access

Okta
Microsoft Entra ID
Google Workspace

IT service management

ServiceNow CMDB
Freshservice

Cloud inventories

AWS Config
Azure Resource Graph
GCP Asset Inventory

Devices and browsers

Microsoft Intune
Jamf Pro
Fleet (osquery)
Chrome Enterprise

Code

GitHub

Messaging

Slack

FinancePro

Xero
QuickBooks Online
MYOB

NetworkPro

Network egress logs

Finance and network egress connectors join at the Pro tier. Enterprise adds an AI Wizard for sources beyond the built-in connectors.

Suggestions, not silent additions

Discovery scans. Run against your connected sources on demand or on a schedule, with monthly scan allowances that grow with each band and tier.

A queue with history. Every scan and every finding is kept, so you can see what was found, when and from which signals.

Correlated suggestions. Related signals are resolved into a single suggested system or agent, with the evidence for the suggestion attached.

Recorded decisions. A person accepts each suggestion into the AI Register, dismisses it or holds it, and the decision is recorded. Nothing enters your register without someone deciding it should.

Included from the free tier

Discovery is not an enterprise add-on. Scans, the suggestion queue and discovery decisions are included from the free Register tier, because a true picture of what you run is the starting point for everything else. See the pricing page for scan allowances by tier and band, and the free AI Register page for what the free tier covers.

Aicura provides guidance, not legal advice, and does not certify, audit or issue a compliance verdict. Discovery tells you what is running. What your organisation does about it stays your decision.

Shadow AI questions, answered

See what you're actually running

Create a free account, connect a source and run your first discovery scan. The suggestions land in a queue and your register starts telling the truth.