--- title: Shadow AI agents are multiplying. Here's how to find and... description: Unmanaged AI agents built by employees on platforms like Salesforce Agentforce, Microsoft Copilot Studio, Cursor, and Zapier are proliferating without IT or... canonical: https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Shadow AI agents are multiplying. Here's how to find and secure them. | daily.dev og:description: Unmanaged AI agents built by employees on platforms like Salesforce Agentforce, Microsoft Copilot Studio, Cursor, and Zapier are proliferating without IT or... og:url: https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk og:image: https://api.daily.dev/og/posts/T8HKss9tK.png og:image:alt: Shadow AI agents are multiplying. Here's how to find and secure them. og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shadow AI agents are multiplying. Here's how to find and secure them. **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 6 min read · 1 upvotes · 0 comments ## Summary Unmanaged AI agents built by employees on platforms like Salesforce Agentforce, Microsoft Copilot Studio, Cursor, and Zapier are proliferating without IT or security oversight. Unlike shadow AI chatbots, these agents hold persistent permissions, connect to corporate systems, and take autonomous actions — making them a significant security risk. Nudge Security addresses this with two discovery methods: API-based discovery for platforms that expose agent data, and browser extension-based discovery for platforms that don't. Once discovered, each agent is assessed for risks such as excessive permissions, hardcoded credentials, unauthenticated MCP connections, and dormant access. Governance workflows allow security teams to set approval statuses, assign owners, and nudge creators to address risky configurations without becoming a bottleneck. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Shadow AI Is Already Inside Your Organization](https://daily.dev/posts/shadow-ai-is-already-inside-your-organization-e0fveze6k) · Security Boulevard · 0 upvotes · 0 comments - [Shadow AI is already inside your company. Here’s how to get control of it](https://daily.dev/posts/shadow-ai-is-already-inside-your-company-here-s-how-to-get-control-of-it-44m1i7iyo) · The Next Web · 1 upvotes · 0 comments - [Securing Shadow AI: How to Detect Unapproved LLMs in Your Cloud](https://daily.dev/posts/securing-shadow-ai-how-to-detect-unapproved-llms-in-your-cloud-grptpqodn) · Orca Security Blog · 0 upvotes · 0 comments - [\[Webinar\] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl](https://daily.dev/posts/webinar-securing-agentic-ai-from-mcps-and-tool-access-to-shadow-api-key-sprawl-hokzzedlq) · The Hacker News · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#ai-governance](https://daily.dev/tags/ai-governance) [View this post on daily.dev](https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Shadow AI agents are multiplying. Here's how to find and secure them.","url":"https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk"},"datePublished":"2026-07-27T14:07:50.180Z","dateModified":"2026-09-14T06:03:07.281Z","description":"Unmanaged AI agents built by employees on platforms like Salesforce Agentforce, Microsoft Copilot Studio, Cursor, and Zapier are proliferating without IT or...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4f5c3a98eff50ab445fa3a9311160dd6?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4f5c3a98eff50ab445fa3a9311160dd6?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/shadow-ai-agents-are-multiplying-here-s-how-to-find-and-secure-them--t8hkss9tk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-agents,ai-governance","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Shadow AI agents are multiplying. Here's how to find and secure them."}]} ```