Shadow-AI security

Catch sensitive data before it reaches AI.

Discover the AI tools your team uses. Catch sensitive data and coach people before they send it.

Managed deployment for Chrome and Edge · only the finding leaves the browser

You · to an AI assistant

Here's the deploy script. The prod key is key-9f2a-4c81-7de0-prodAWS key so it can push to S3.

Careful, that looks like an AWS access key.

It's masked here. Nothing was sent. Remove it, or continue if it's a placeholder.

How it works

Discover, monitor, coach.

Start with visibility. After 14 days of monitoring, choose how Blank helps your team.

01 · Discover

Find the AI already in use

See known AI tools and discover new ones across your managed browsers.

Ships on the Free plan
02 · Monitor

Watch what's on the way out

Record sensitive-data findings without interrupting your team. See the detector, severity, and domain.

Every deployment starts here
03 · Coach

A nudge, not a wall

Give people an in-page warning when sensitive data is detected. They can remove it or dismiss the warning and keep working.

Unlocks after 14 days of monitoring
Privacy

Built to see less.

Sensitive text stays on the device. Your dashboard gets the finding, not the content.

Only the finding leaves Reports include the detector, severity, and domain. Matched text stays in the browser.
No full browsing-history log Visits are reported for known and candidate AI tools. Local inspection runs across websites; findings from supported text fields may include other domains. Raw content stays on-device.
Private by default Device identities are pseudonymized by default, before reports reach dashboards or exports.
Signed catalog The AI-tool catalog is signed offline. Devices verify it before accepting updates.
Pricing

Discovery is free. Forever.

Find your shadow AI at no cost. Upgrade when you're ready for detection, coaching, or enforcement.

Free
$0 up to 100 seats

No card required. No trial deadline.

Discover the shadow AI already in use across your org.

  • Known and newly discovered AI tools
  • Browser extension permissions
  • Personal vs. company account signals
  • 30 days of history
  • Exportable security report
Start free
Team
$4 / seat / month

$400/month minimum

Detect sensitive data and coach your team.

  • Secret and customer-data detection
  • In-page coaching after 14 days of monitoring
  • Noisy detectors revert to monitoring
  • 12 months of history
  • Audit evidence pack
Choose Team
Business
$6 / seat / month

Everything in Team, plus more control.

Enforce policies and prepare for audits.

  • Redaction and blocking policies
  • Custom detectors
  • SSO, SCIM, role-based access, SIEM export
  • Evidence mapped to SOC 2, ISO 27001, ISO 42001, and EU AI Act Article 4
Choose Business

A seat is an enrolled device that reported activity in the last 30 days. Multiple devices for one person count as multiple seats.

Start on Free; owners choose paid plans in Settings → Seats & billing. Business requires one reporting device. Paid plans renew monthly until canceled.

Seat grace, cancellation, and retention details · Terms & refunds

Compare Blank with other options
FAQ

Questions teams ask.

What is shadow AI?

Shadow AI is AI used for work without IT's approval or visibility. The risk is sensitive information shared with tools your company hasn't reviewed.

How does Blank catch sensitive data?

Blank detects secrets, credentials, and customer data in the browser. With coaching enabled, it warns people in the moment; Business can also redact or block supported sends according to your policy.

What does Blank report?

Blank reports metadata such as the detector, severity, and domain, never the matched text. Device identities are pseudonymized by default.

How does Blank discover AI tools?

Blank matches browser activity against known AI tools and surfaces new candidates. Your dashboard shows usage by tool and device.

Does Blank block AI tools?

Not by default. Every deployment starts in Monitor mode. After 14 days of monitoring, admins can enable coaching or, on Business, redaction and blocking policies.

How is Blank deployed?

Force-install Blank through Chrome or Edge browser management, with no per-user setup. Local inspection runs across websites; only metadata is reported. See our privacy policy for the reporting scope.

Get started

Start with visibility. Add control when you’re ready.