cyber.hendryadrian.com
Security News · bleepingcomputer.com

Nudge Security Details Ways to Discover and Govern Shadow AI Agents

· Original article ↗

Summary

Nudge Security describes API-based and browser-extension discovery for shadow AI agents, risk checks for agent permissions and configurations, and workflows for assigning owners and addressing risks.

Key points

  • Nudge Security says its platform discovers agents through APIs on supported platforms and a browser extension where agent data is not exposed through an API.
  • API discovery collects agent names, creators, creation dates, status, configuration, and risk insights.
  • Browser-based discovery observes when employees view, list, or create agents and records details including creators, connected apps, and permissions.
  • The platform identifies risks including public access, excessive or destructive permissions, hardcoded credentials or PII, unauthenticated MCP connections, and dormant agents with active access.
  • Governance features include approval statuses, assigning an accountable owner, and contacting owners through the extension, Slack, Teams, or email to review or address risks.
  • Nudge Security says its discovery covers more than 17 agentic platforms.

Article Details

Event Type
Sponsored product promotion and security guidance on discovering and governing shadow AI agents
Impact
The article warns that unmanaged AI agents may retain persistent access to corporate apps and data and act autonomously. It identifies potential risks including public access, excessive or destructive permissions, hardcoded credentials or PII, unauthenticated MCP connections, dormant agents with active access, and agents whose creators have left the organization. These are described as risks to assess, not as a reported incident.

Vendors

Googleimmediate inventory of AI agents, across the most popular agentic platforms including Microsoft Copilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, andMicrosoftYour workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.Nudge SecuritySponsored by Nudge SecurityOpenAISecurity browser extension, covers the platforms that don't expose an API at all: Cursor automations, OpenAI Agent Workflows, ChatGPT workspace agents, Zoom AI Workflows, Atlassian Rovo, Retool, Zapier Agents, andSalesforceYour workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.ServiceNowagentic platforms including Microsoft Copilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, and many more.

Products

ChatGPTof AI agents, across the most popular agentic platforms including Microsoft Copilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, and many more.Claude Managed Agentsacross the most popular agentic platforms including Microsoft Copilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, and many more.Cursor AutomationsCopilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, and many more.Google Geminiinventory of AI agents, across the most popular agentic platforms including Microsoft Copilot, Google Gemini, ChatGPT, Claude Managed Agents, Tines, ServiceNow, Salesforce Agentforce, Cursor Automations, andMicrosoft Copilot StudioYour workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.Nudge SecuritySponsored by Nudge SecurityRetoolYour workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.Salesforce AgentforceYour workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.Zapier AgentsOpenAI Agent Workflows, ChatGPT workspace agents, Zoom AI Workflows, Atlassian Rovo, Retool, Zapier Agents, and HyperAgent.

Related Articles