How are you discovering which AI tools employees use?
We ran a discovery pass on our outbound traffic a few weeks back expecting to see ChatGPT and maybe Grammarly and it came back with 27 different AI tools. One was a resume site that someone in HR had fed the whole org chart into.
Yes the DNS logs gave me the obvious ones easily enough, but its the rest that slips past me. I only found out last week that one of the devs had a browser extension quietly summarising internal tickets, something my filter would never have caught because it does not resolve a known domain. The same goes for the AI features that got switched on inside a couple of SaaS tools we already pay for. A script someone pointed at an API key only turned up when the monthly bill jumped.
I would like to hear from people who have pushed past a DNS baseline. What is catching the personal account and extension usage in your environment and how did you end up finding your agents?