Most companies already know employees are using AI tools nobody approved. The harder question is finding them. A browser extension might catch a personal ChatGPT login and miss an OAuth-connected AI app. A SaaS discovery tool may find that connection and miss a desktop AI client. That difference is what you are buying when you pick a shadow AI discovery product.
Shadow AI is workforce AI you did not approve: a personal ChatGPT account, an unsanctioned OAuth grant, a browser extension, or an agent someone stood up in Foundry. That is not the same job as AI-SPM, which is posture of models and agents you already know about, or DLP that caught a prompt. Microsoft’s Copilot admin docs treat third-party generative AI apps as an inventory and control problem, not a model-card review. Our AI-SPM list is the known-system job. The method is on How we review tools.
Nudge Security publishes a mailbox rate. Microsoft Purview DSPM ships inside Microsoft 365 E5 or Purview Suite, so the $60 user/month yearly number is the suite, not a discovery price. LayerX, Harmonic Explore, Palo Alto Networks AI Access Security, Netskope One, and Check Point Workforce AI Security need a sales conversation. Browser-based discovery is best for unsanctioned AI used directly by employees, while SASE and network platforms provide a broader enterprise view. Mailbox-based products can also find AI sign-ups and usage signals that browser controls miss.
What usually goes wrong when buying shadow AI discovery
The demo often shows one way of finding AI. The leak is usually somewhere else.
| Problem | Solution |
|---|---|
| The product is posture of known AI systems, or DLP that found a prompt | Ask for a vendor page that names shadow AI, unsanctioned AI, or GenAI discovery of workforce AI you did not approve |
| The demo is browser tabs, but the leak is an OAuth grant or a Foundry agent | Write down how the product finds AI: browser, SaaS, or network. One method will miss the others |
| Teams treat Microsoft 365 E5 $60 as the discovery price | Check whether the published number is a suite price, a mailbox rate, or contact sales, and whether Copilot licenses are extra |
| Last year’s brief named Harmonize, and that product is not for sale | Harmonize was not a live product on 25 August 2026. The nearby name that is for sale is Harmonic Explore |
How we evaluated shadow AI discovery tools
A tool had to name shadow AI, unsanctioned AI, or GenAI discovery; say how it finds that AI (browser, SaaS, or API); make a published price distinguishable from contact sales; and inventory AI you did not approve, not only systems you already connected. LayerX and Harmonic Explore lead with the browser. Palo Alto, Netskope, and Check Point are the enterprise SASE or suite options. Nudge starts from email. Purview sits inside Microsoft 365. Neighbor products sit under What we left out. Prisma AIRS Agent Discovery inventories agents on clouds you already onboarded. That is AI-SPM of known accounts, so it is not on this page.
TL;DR: The Seven Compared
| Tool | Best For | Pricing Model | Highlights |
|---|---|---|---|
| LayerX | When the shadow AI problem happens primarily in the browser | Contact sales. Fees on a purchase order. Akamai acquired LayerX | Browser-extension inventory of apps, identities, and AI extensions |
| Harmonic Explore | A browser-extension map of 1,000+ web AI tools | Contact sales. Demo | Named Shadow AI Discovery product. Desktop AI needs an endpoint or OpenTelemetry |
| Palo Alto Networks AI Access Security | Prisma SASE shops that need sanctioned / tolerated / unsanctioned GenAI | Contact sales. AI Access Security license, or CASB-PA / CASB-X / Prisma Browser, plus Strata Logging Service | Product page says 4000+ GenAI apps. Docs say 500+. Those pages disagree |
| Netskope One GenAI | Netskope shops that need shadow AI on the AI Dashboard | Contact sales. Sold as part of SSE / Netskope One. No discovery-only price | Sees personal versus corporate instances. Endpoint AI Discovery of agents and local MCP is beta |
| Check Point Workforce AI Security | Check Point shops that need workforce shadow AI on browser and desktop | Contact sales. Essentials is web. Enterprise adds desktop / IDE / MCP per the admin guide | Browser extension first. FAQ says MSP; admin guide says MCP. Those are not the same word |
| Nudge Security | A published SaaS/AI discovery price plus email, API, and browser channels | Essential $750/month billed annually (≤150 mailbox users). Growth $5/user/month billed annually (150–1,500). Example: 500 users = $2,500/mo. Enterprise custom | An active user is a licensed mailbox. Agent discovery is a research preview |
| Microsoft Purview DSPM | Microsoft 365 shops that need Copilot plus a browser view of third-party GenAI sites | Microsoft 365 E5 $60.00 user/month yearly is the suite, not the price of discovery. Needs E5 or Purview Suite | Purview browser extension for third-party sites. Copilot licenses are extra |
LayerX
LayerX Shadow AI Discovery is a named use case on LayerX’s browser security platform. The page says it exposes and eliminates shadow AI tools: discover, audit, and secure AI usage across the organization. Most people use GenAI in the browser, so LayerX deploys as a browser extension with visibility and control over AI applications and extensions. The same page says it also covers native desktop AI applications. It does not describe an API discovery path there.
It inventories every AI app in use (sanctioned, unsanctioned, or embedded in SaaS), who is using them, corporate and personal accounts, AI browser extensions with permissions and threat level, unsanctioned shadow AI apps and PWA-based native apps, and AI conversations across major platforms (user prompts and LLM responses). There is no public price on layerxsecurity.com. Terms point to fees on a purchase order. LayerX pages say AWS customers can buy via AWS Security Hub Extended / Marketplace with pay-as-you-go on the AWS bill. Those pages do not list a dollar rate. Akamai acquired LayerX, and a banner on the discovery page says so. You may be buying through Akamai, not a standalone LayerX list price.
Best for: Teams whose shadow AI problem happens primarily in the browser: personal ChatGPT accounts, AI extensions, and embedded SaaS AI.
What you get:
- A browser extension that sees apps, identities, AI extensions, and conversations
- Personal and corporate accounts, plus extension permissions and threat level
- Contact sales. Akamai acquired LayerX
Why we like it: It sees personal ChatGPT accounts, AI extensions, and the conversation itself from a browser extension, without waiting on a SASE project.
Limits:
- This is an AI interaction and browser security platform, not a SaaS API inventory of OAuth grants or a cloud-builder AI-BOM
- Desktop AI coverage is claimed on the same page. Deployment still leads with a browser extension
Price: Contact sales. Fees on a purchase order. layerxsecurity.com/use-cases/shadow-ai-discovery.
Before buying
Ask whether you are buying LayerX or an Akamai product, and whether desktop AI is on the same line as the browser extension.
Harmonic Explore
Harmonic Explore is Harmonic’s AI usage visibility and Shadow AI Discovery product. Deploy the Harmonic browser extension, and within days you have a map of the AI tools the workforce actually uses, including a long tail of 1,000+ web AI tools that the catalogue updates weekly. Prompt-level insights run across over 1,000 applications, including embedded AI features inside SaaS tools already in use. The FAQ names Canva, Grammarly, and Google AI mode. Each tool profile shows who uses it, how often, whether the vendor trains on user inputs, and a risk score.
There is no public list price on harmonic.security. The path is a demo or contact sales. The FAQ lists browsers (Chrome, Edge, Firefox, Safari, Arc, Brave, Vivaldi, Island, Genspark, Comet, Dia). Desktop AI is via OpenTelemetry or an endpoint (Claude Desktop, ChatGPT Desktop, Cursor, Windsurf). Agents and MCP are a separate surface. Explore does not describe a SaaS API connector path. Harmonic is an AI Governance and Control platform. Explore is visibility. Guide and Command add inline SLM DLP. Explore is not an API-key scanner. The FAQ contrasts itself with SASE: it sits on the device and inside the AI surface.
Best for: Security and AI leaders who want a browser-extension inventory of web GenAI plus embedded SaaS AI, then usage intelligence on why people use each tool.
What you get:
- Named Shadow AI Discovery product (Explore)
- 1,000+ web AI tools. Prompt-level insights. Per-tool risk and training-policy profile
- Contact sales. Desktop and MCP need the endpoint or MCP gateway, not the extension alone
Why we like it: You get a weekly map of 1,000+ web AI tools, plus who uses each one, how often, and whether the vendor trains on inputs. That is the long tail a ChatGPT-only inventory misses.
Limits:
- Harmonic does not publish a per-seat Explore price
- Desktop AI and MCP coverage is not the browser extension alone
Price: Contact sales on harmonic.security/products/explore.
Palo Alto Networks AI Access Security
Palo Alto Networks AI Access Security is the SASE path for visibility into shadow AI and the broader AI ecosystem. The product page lists 4000+ GenAI applications, 80+ GenAI-specific attributes, and 300+ ML data classifiers. It discovers and categorizes GenAI applications, agents, and marketplace plugins, then shows which apps are in use and by whom. Administrators classify apps as sanctioned, tolerated, or unsanctioned, revoke access by privilege and risk, and apply fine-grained control over actions such as upload and download. User coaching notifies employees who try unsanctioned GenAI or are about to violate an AI usage policy.
There is no public list price. Admin docs say you need Strata Logging Service plus one of: an AI Access Security license, CASB-PA, CASB-X, or a Prisma Browser standalone license. Enforcement points there are NGFW, Prisma Access, and Prisma Browser. The same docs describe a dictionary of over 500 GenAI apps and 60+ attributes. The product page says 4000+ apps. The docs say 500+. Those are different pages. This is SASE GenAI security, not a standalone browser-only discovery product.
Best for: Enterprises already on Prisma Access, NGFW, or Prisma Browser that need sanctioned, tolerated, and unsanctioned GenAI policy from one SASE console.
What you get:
- Sanctioned, tolerated, and unsanctioned GenAI policy, plus user coaching
- AI Access Security, or CASB-PA / CASB-X / Prisma Browser, plus Strata Logging Service
- Product page: 4000+ GenAI apps / 80+ attributes. Docs: 500+ / 60+
Why we like it: If you already run Prisma, you get GenAI policy and user coaching in the console you already have, instead of adding a specialist browser tool.
Limits:
- The product page and the docs disagree on the app count
- No public list price. This is SASE, not a specialist browser extension
Price: Contact sales. AI Access Security docs.
Before buying
Ask whether you are buying the AI Access Security license or CASB-PA / CASB-X / Prisma Browser. The product page and the docs use different app counts.
Netskope One GenAI
Netskope One Securing Generative AI is Netskope’s named shadow-AI visibility module on the SSE platform. The page describes visibility into shadow AI: identify AI use across managed and unmanaged SaaS applications, then use the AI Dashboard to see applications, instance type, and actions such as login, post, upload, and download. Netskope Threat Labs’ Cloud and Threat Report: Generative AI 2025, cited on that page, says 72% of generative AI use in the enterprise is shadow AI. Cloud Confidence Index copy on the same page covers over 370 genAI apps and 82,000+ SaaS applications. The FAQ on that page also says over 85,000 SaaS and AI applications. Those two figures sit on the same site. Instance awareness distinguishes personal versus corporate instances of the same app.
There is no public discovery-only price. This is contact-sales Netskope One / SSE. AI Asset Overview docs add an inventory of identities, AI applications, and MCP servers, plus a sanctioned versus unsanctioned breakdown. Agents and models on managed endpoints come from NS Client Endpoint AI Discovery. Discovery of agents, models, and local MCP servers on managed endpoints is a beta feature. Contact the Netskope account team for access. That beta is not coverage until it is in the agreement.
Best for: Netskope shops that need shadow AI and instance awareness on the AI Dashboard, not a second specialist console.
What you get:
- Shadow AI on the AI Dashboard, including personal versus corporate instances
- Sold as part of SSE / Netskope One. No discovery-only price
- Endpoint AI Discovery of agents, models, and local MCP is beta
Why we like it: Instance awareness. If employees use both a corporate ChatGPT and a personal one, you can tell them apart instead of treating every login as the same risk.
Limits:
- This is SSE with a GenAI module, not a standalone discovery product
- The product page says 82,000+ SaaS apps. The FAQ says 85,000
Price: Contact sales on netskope.com/products/securing-generative-ai.
Before buying
Ask whether Endpoint AI Discovery (agents, models, local MCP) is included in year one or still a beta request.
Check Point Workforce AI Security
Check Point Workforce AI Security is the workforce discovery, governance, and protection product on Check Point’s AI Defense Plane. The heading is discover, govern, and protect employee AI usage across browser, desktop, and agents. The copy inventories every AI tool, agent, and action across web and desktop apps, SaaS integrations, browser extensions, code assistants, AI agents, and MCPs. The FAQ says it automatically discovers every AI tool in use, sanctioned or unsanctioned, and names public AI tools (ChatGPT, Gemini, Claude, Copilot), browser extensions, desktop agents, SaaS-integrated AI, code assistants (GitHub Copilot, Cursor), and MCP-connected workflows. Deploy copy leads with a lightweight browser extension. A desktop agent is also available.
There is no public list price. The product FAQ describes two tiers: Essentials focuses on web applications; Enterprise covers web, desktop, MSP, and IDEs. The admin guide describes Enterprise as web, desktop, MCP, and IDEs, and Essentials as web applications only. MSP and MCP are not the same word. A related marketing page, AI Discovery and Visibility, sits under the same AI Defense Plane.
Best for: Check Point shops that need workforce shadow AI on the browser first, then desktop, IDE, and MCP if they buy Enterprise.
What you get:
- Discovery of sanctioned and unsanctioned AI across web, and desktop if you buy Enterprise
- Essentials is web. Enterprise adds desktop / IDE / MCP per the admin guide
- Browser extension first. Desktop agent optional
Why we like it: Check Point shops can start with the browser, then add desktop, IDE, and MCP on Enterprise without bringing in a second vendor.
Limits:
- This is workforce AI security and DLP with discovery, not a SaaS API OAuth graph
- The FAQ says MSP. The admin guide says MCP
Price: Contact sales on checkpoint.com/ai-security/ai-workforce-security.
Before buying
Ask whether you are buying Essentials (web) or Enterprise, and whether MCP and IDE coverage is in writing.
Nudge Security
Nudge Security discovers workforce AI from email, then adds API and browser channels for employee-built agents. Day One copy is historical and real-time workforce AI apps and accounts via patented email-based discovery on Microsoft 365 or Google Workspace, including ChatGPT, Claude, DeepSeek, Perplexity, Gemini, and tools not on a static list. The AI Security page also names MCP, API, and webhook SaaS-to-AI integrations, plus API key copy-and-paste detection. Connected-app API discovery refreshes about every 24 hours. The browser extension is near real-time.
The pricing page (25 August 2026) lists Essential at $750/month billed annually, up to 150 users, all features included. Growth is $5/user/month billed annually for 150–1,500 users, all features included. The page example is 500 users = $2,500/mo. Enterprise at 1,500+ users is a custom ELA. An active user is an active licensed user with a mailbox in Google Workspace or Microsoft 365, queried via the Google Workspace API or Microsoft Graph. Archived, deleted, or suspended users, groups, and shared aliases are excluded. Nudge platform admin seats are not billed as a separate seat. Nudge says organizations typically have 1.2–1.5 active workspace users per employee, and you generally cannot monitor a subset of mailboxes. AI agent discovery is listed under every plan. The feature page says it is a research preview: live, coverage expanding, request access.
Best for: IT and security teams that want a published SaaS/AI discovery price, email-based Day One inventory, then API plus browser channels for employee-built agents.
What you get:
- Email, API, and browser discovery of SaaS and AI
- Published mailbox rates on Essential and Growth. An active user is a licensed mailbox
- AI agent discovery on every plan, as a research preview
Why we like it: You can see ChatGPT accounts that already exist in email on Day One, at a published mailbox price, without waiting on a SASE rollout.
Limits:
- AI agent discovery is a research preview. Existing customers ask product success for access
- You are billed on workspace mailboxes, not employees. You generally cannot monitor a subset
Price: Essential $750/month billed annually (≤150 users). Growth $5/user/month billed annually. Example 500 users = $2,500/mo. nudgesecurity.com/pricing.
Before buying
Ask for the mailbox count in the admin console before you estimate Growth, and whether AI agent discovery is enabled for your tenant or still a preview request.
Microsoft Purview DSPM
Microsoft Purview Data Security Posture Management is the Copilot-tenant plus browser-extension path for third-party GenAI sites. Current DSPM docs (updated 2026) include a Discover > Apps and agents dashboard, an AI observability inventory of AI apps and agents, and Activity explorer AI activities that include when a user browsed to a generative AI site. Classic DSPM for AI still names the Microsoft Purview browser extension and onboarded devices as prerequisites for third-party AI sites. Other AI apps detected through browser activity are categorized as Generative AI in the Defender for Cloud Apps catalog (ChatGPT, Google Gemini, Microsoft Copilot consumer, DeepSeek). Enterprise AI apps include Entra-registered apps, ChatGPT Enterprise, and Microsoft Foundry. Copilot experiences include Microsoft 365 Copilot, Security Copilot, Copilot in Fabric, and Copilot Studio.
There is no standalone Shadow AI price. Microsoft 365 E5 lists $60.00 user/month, paid yearly (annual commitment) on the US page (25 August 2026). That is the E5 bundle, not a DSPM-only rate. Microsoft’s get-started copy says you access DSPM / DSPM for AI with Microsoft 365 E5 or Microsoft Purview Suite (formerly Microsoft 365 E5 Compliance). Copilot activity insights also need Microsoft 365 Copilot licenses. Prompt and response capture for some Copilots needs the matching one-click policy. Classic DSPM for AI is replaced by the current DSPM. New features go to the current version only. Third-party site coverage is a supported-sites list plus the browser extension and device onboarding, not every GPT wrapper on the internet. $60 is not the price of AI discovery.
Best for: Microsoft 365 shops that already pay for E5 or Purview Suite and need Copilot plus a browser-extension view of third-party GenAI sites.
What you get:
- AI apps and agents dashboard, including Copilot experiences and third-party GenAI sites
- Needs Microsoft 365 E5 or Purview Suite. The suite price is not a discovery rate
- Purview browser extension and device onboarding for third-party sites
Why we like it: If you already pay for E5 or Purview Suite, you get Copilot activity and a supported list of third-party GenAI sites in the portal you already run, instead of adding another console.
Limits:
- Not a multi-IdP SaaS discovery graph and not an endpoint process inventory of Claude Code
- E5 is the suite. Copilot licenses and some consumption-based Purview features can add separate charges
Price: Microsoft 365 E5 $60.00 user/month yearly is the suite, not the price of discovery. Microsoft 365 E5.
Before buying
Ask whether you already have E5 or Purview Suite, whether Copilot licenses are in the tenant, and whether the Purview browser extension is in the deployment plan.
If the next job is posture of AI systems you already know, start with AI-SPM platforms. If the next job is Salesforce or Okta misconfig rather than unsanctioned ChatGPT, use SSPM platforms.
How each tool finds AI, and whether the price is public
This grid answers two questions. Across is how the product finds AI: browser on the left, SaaS or SASE on the right. Up is how you pay: a published suite or mailbox rate at the top, a sales quote at the bottom.
E5 $60 is the suite, not the price of discovery
Mailbox rate, billed annually
SSE GenAI module, sales quote
Placement follows what each vendor’s product page leads with: browser versus SaaS or SASE, and a published suite or mailbox rate versus contact sales. Nudge and Check Point name more than one method. Each logo sits in the square that matches the lead method. This is a map of the products, not a ranking.
Pricing and licensing, side by side
| Tool | How pricing works | What to confirm before buying |
|---|---|---|
| LayerX | Contact sales. Possible AWS Marketplace path, no list rate | LayerX Shadow AI Discovery, or an Akamai product |
| Harmonic Explore | Contact sales | Harmonic Explore, not Guide or Command alone |
| Palo Alto Networks AI Access Security | Contact sales. AI Access Security, or CASB-PA / CASB-X / Prisma Browser, plus Strata Logging Service | AI Access Security, not a vague SASE bundle. Product page 4000+ vs docs 500+ |
| Netskope One GenAI | Contact sales. SSE / Netskope One | Netskope One GenAI / shadow AI. Endpoint AI Discovery is beta |
| Check Point Workforce AI Security | Contact sales. Essentials or Enterprise | Workforce AI Security. Essentials (web) or Enterprise. FAQ says MSP; admin guide says MCP |
| Nudge Security | Active licensed mailbox in Google Workspace or Microsoft 365 | Essential $750/month billed annually (≤150) or Growth $5/user/month billed annually. Agent discovery is a research preview |
| Microsoft Purview DSPM | Suite. Microsoft 365 E5 $60.00 user/month yearly, or Purview Suite | E5 or Purview Suite plus DSPM, not “$60 for AI discovery.” Copilot licenses are extra |
What we left out
These are real products. We left each one off because the buyer job is different.
- Reco Shadow AI Discovery, Lasso Discovery & AI-BOM, and Obsidian Shadow AI are specialist discovery products still for sale. Look at them if you need an OAuth identity graph, a cloud-builder AI-BOM, or a SaaS security page that splits browser, API, and agents. This page is for finding unsanctioned AI in the browser, in SaaS, or on the network.
- Cyberhaven AI Security names Shadow AI Discovery across endpoints, browsers, CLIs, and IDEs, plus MCP servers, with Data Lineage. Look at it if you need OS-level agents (Claude Code, Copilot, Codex). It is a Unified AI and Data Security / DLP platform with a shadow-AI feature, not a browser-versus-SaaS discovery product.
- Nightfall Shadow AI discovers AI apps, agents, and MCP servers so security can govern AI. Discovery there is in service of AI-native DLP, so it is not an inventory product on this page. Harmonize is not an active product. Harmonic Explore is the current product in this comparison.
Questions before you sign a shadow AI discovery tool
If you cannot answer these three, you are still buying the wrong product.
- Does it find AI in the browser, in SaaS (OAuth / email / IdP), or on the network, and which of those is missing?
- Is the published number a mailbox rate, a suite price, or contact sales, and are Copilot, agent-preview, or endpoint-beta modules extra?
- Does the inventory cover AI you did not approve, or only posture of systems you already connected?
Which shadow AI discovery tool should you pick
If the leak is a personal ChatGPT tab or an AI extension, start with LayerX or Harmonic Explore. If you already buy Prisma, Netskope, or Check Point, open the named GenAI or Workforce AI line before you add a second console. If the leak is a mailbox you can query on Day One, start with Nudge. If you already pay for Microsoft 365 E5 or Purview Suite, open DSPM before you add a second console, and do not treat $60 as the discovery price. Decide how the tool finds AI, how you pay, and whether agent discovery is preview or beta.
Frequently asked questions
Is shadow AI discovery the same as AI-SPM?
No. Shadow AI discovery lists workforce AI you did not approve. AI-SPM is posture of known or sanctioned AI systems: models, agents, and data paths you already connected. A quote that only lists Bedrock accounts you connected last quarter is not a ChatGPT-tab buy. Our AI-SPM list is that known-system job.
Is Microsoft 365 E5 $60 the price of Purview AI discovery?
No. $60.00 user/month yearly is Microsoft 365 E5, a suite. Microsoft’s DSPM docs say you need Microsoft 365 E5 or Microsoft Purview Suite. Copilot activity insights also need Microsoft 365 Copilot licenses. Copilot licenses and some consumption-based Purview features can add separate charges. Buy the suite and the extra Copilot line, not “$60 for shadow AI.”
Is Nudge’s AI agent discovery generally available?
It is listed under every Nudge plan. The feature page calls it a research preview: live, coverage expanding, request access. The published rates (Essential $750/month billed annually up to 150 mailbox users, Growth $5/user/month billed annually) are the platform. Confirm preview access before you treat agent inventory as coverage.
