Browser
AI chat products opened in a browser tab.
Map every model and surface employees use, sanctioned or not, through metadata-only telemetry, so shadow AI becomes visible and governable.
Example: Claude, ChatGPT, Gemini and Copilot are sanctioned, Meta AI and Qwen are blocked. DeepSeek is detected as a new tool, marked Unreviewed, and an admin sets it to Unsanctioned.
People sign up for whatever helps them work faster, often with a personal account. The tool never goes through vendor review and never shows up in SSO logs.
Alesia detects AI providers from what actually runs on the device. There is no fixed list of known products, so a brand-new tool shows up the same way an established one does.
AI chat products opened in a browser tab.
Plugins and assistants that call a model from the editor.
Terminal sessions that reach a model with an API key.
AI apps installed on the device.
Every detected tool gets a status. Shadow AI turns into a list of decisions instead of a standing worry.
Approved for use. Add it to your inventory, where its usage and cost are tracked from then on.
Not approved. Its requests count toward the unsanctioned share in your overview.
Flagged for a closer look before you decide.
Requests are blocked on the devices your policy covers. Each attempt is recorded as an incident.
Every detected tool carries a risk level, from low to critical. The overview shows how many tools are in use, how many are critical, and what share of all requests goes to tools you haven't sanctioned, so the review starts at the top of the list.
Alesia surfaces which AI tools are in use, by whom, and how often, without reading the content of a single conversation. IT and security get a real inventory instead of a guess.
No. Alesia detects AI providers from what actually runs on the device, so a brand-new tool shows up the same way an established one does.
No. Shadow AI is built on metadata: which tool, which runtime, how many requests. Prompts and responses never leave the device.
Requests to that tool are blocked on the devices your policy covers. The attempt is recorded as an incident, so you can see whether people still reach for it.
Set the rules once. Alesia enforces them on every device, and prompts stay on your devices.