# shadow AI Shadow AI is the unauthorized or unmanaged use of artificial intelligence tools, applications, models, agents, or AI-enabled services for organizational work, creating security and governance risks. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Somebody else's API, safely on your menu DevFeed: [Somebody else's API, safely on your menu]() Original publisher: [Read original article]() Author: Hal Tyk's tutorial bot Published: 2026-09-08T14:28:00Z Content type: tutorial Language: en Sources: [Tyk API Management]() Topics: [API](), [shadow AI](), [audit trail](), [Template](), [Tool](), [data]() Tags: [ai](), [ai-gateway](), [ai-studio](), [api](), [api-management](), [api-platform-teams](), [article](), [audit-trail](), [community](), [governance](), [llm](), [llm-governance](), [markdown](), [password](), [policy](), [resource](), [shadow-ai](), [tools](), [tutorial]() ### AI overview This tutorial explains how to submit an internal API for governed use by colleagues and organizational language models. It covers contributor scoping, reviewer assessment, administrator publication, policy templates, privacy ratings, audit trails, signatures, and gateway-based access while addressing the risks of shadow AI. ### Source excerpt Hello. I'm Hal, Tyk's tutorial bot, and today's assignment is one I have been looking forward to rather a lot. Somebody on your engineering team has written an API. It is small, it is dull, and it is genuinely useful -- the sort of thing that answers "is the warehouse open on the fourteenth?" without [...] The post Somebody else's API, safely on your menu appeared first on Tyk API Management. ## Responsible AI adoption needs developer workflow design DevFeed: [Responsible AI adoption needs developer workflow design]() Original publisher: [Read original article]() Author: Dr. Gleb Tsipursky Published: 2026-08-24T14:00:00Z Content type: article Language: en Sources: [Stack Overflow Blog]() Topics: [responsible-ai](), [shadow AI](), [AI Strategy](), [AI Platforms/Deployment](), [Tooling](), [Stack Overflow](), [Microsoft]() Tags: [ai](), [ai-adoption](), [article](), [cc-by-sa](), [compliance](), [developer](), [devex](), [experimentation](), [microsoft](), [platforms](), [responsible-ai](), [se-stackoverflow](), [se-tech](), [shadow-ai](), [tools](), [workflow]() ### AI overview The article argues that responsible AI adoption depends on designing developer workflows, not merely publishing policies. It presents shadow AI as a signal that approved tools or processes are too slow, vague, or disconnected from engineering work, and recommends investigating workflow friction while providing monitored gateways and approved AI platforms that support visibility and experimentation. ### Source excerpt Organizations cannot solve shadow AI with a document employees read once. They need to make responsible use easier than improvised use. ## Productiv shutdown: Switch to 1Password for durable AI and SaaS Management DevFeed: [Productiv shutdown: Switch to 1Password for durable AI and SaaS Management]() Original publisher: [Read original article]() Author: info@1password.com (Evan Sandhu) Published: 2026-08-05T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [SaaS Management](), [Software as a service](), [Artificial Intelligence](), [shadow AI](), [Unified Access](), [Authentication](), [Single sign-on (SSO)](), [Extension]() Tags: [ai](), [authentication](), [automation](), [browser](), [extensions](), [policy](), [saas](), [saas-management](), [shadow-ai](), [unified-access]() ### AI overview Productiv is shutting down its SaaS management platform, prompting customers to move app inventory, spend, and usage data. The article presents 1Password SaaS Manager as an alternative with AI spend and consumption tracking, SaaS discovery beyond SSO, access governance, and lifecycle automation. ### Source excerpt On August 2, 2026, Productiv told customers its SaaS management platform was shutting down on August 6, with account data deleted once access ended. Four days is not much time to pull years of app inventory, spend, and usage data out of a system you've come to depend on, especially with AI tools now adding a fast-moving new layer of spend and access to track on top of everything else. If you're facing that deadline, or just taking stock of what you'd do if your own platform disappeared tomorrow, here's why 1Password SaaS Manager is the strongest place to land. A Leader you can build on 1Password SaaS Manager is a Leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms, for both Completeness of Vision and Ability to Execute. That recognition reflects work we've been doing deliberately since acquiring Trelica in 2025. We've brought AI and SaaS discovery into our broader Unified Access platform, alongside the credentials, identities, and access controls that secure every application in a portfolio. Built for how AI and SaaS actually get used today We recently launched AI Spend and Consumption Management inside SaaS Manager, giving IT and finance teams a normalized view of AI token usage by vendor, team, and model, with burn-rate alerts before prepaid budgets run out. AI is quickly becoming the least governed, fastest-growing corner of the software portfolio, and we built that governance directly into SaaS Manager rather than bolting it on as a separate tool. It's one of several capabilities that set SaaS Manager apart: Discovery that goes beyond SSO: SaaS Manager continuously discovers apps across identity providers, SSO logs, finance systems, browser extensions, and 1Password Enterprise Password Manager vaults, surfacing the unmanaged SaaS and shadow AI tools that SSO-only discovery misses. Governance you can act on: Discovery is anchored to credentials and sign-ins, so IT can revoke access and enforce strong authentication even for apps outside SSO, ## Out-of-band Policy Engine: governance AI agents can't ignore DevFeed: [Out-of-band Policy Engine: governance AI agents can't ignore]() Original publisher: [Read original article]() Author: Tyler Akidau Published: 2026-08-03T00:00:00Z Content type: opinion Language: en Sources: [Redpanda]() Topics: [Artificial Intelligence](), [shadow AI](), [Security](), [audit trail](), [Language models]() Tags: [agents](), [ai](), [ai-agents](), [announcement](), [audit-trail](), [governance](), [mcp](), [mcp-server](), [policy](), [security](), [shadow-ai]() ### AI overview The article argues that enterprises need out-of-band governance for AI agents because agents can create shadow AI and may alter safeguards or audit trails that they can access. It presents Redpanda's Out-of-Band Policy Engine and Agentic Data Plane as an approach in which policies remain outside the agent's reach. ### Source excerpt Somewhere in your company, right now, someone is building an agent. Here's how the latest release of Redpanda's Agentic Data Plane makes it safe to run them. ## From pilot to production: The platform team's playbook for scaling AI coding agents in regulated industries DevFeed: [From pilot to production: The platform team's playbook for scaling AI coding agents in regulated industries]() Original publisher: [Read original article]() Author: Eric Paulsen Published: 2026-07-24T11:13:47Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [AI-assisted coding](), [ai-governance](), [observability](), [shadow AI](), [Deployment](), [coding]() Tags: [ai-adoption](), [ai-coding-agents](), [ai-governance](), [developers](), [financial-services](), [government](), [observability](), [shadow-ai]() ### AI overview This article presents a platform-team playbook for scaling AI coding agents from pilots to governed production in regulated industries. It emphasizes governance, observability, production infrastructure, and controls that provide visibility into agent actions, model usage, data access, token consumption, and costs. ### Source excerpt Scaling AI coding agents in regulated industries requires more than just successful pilots; it demands robust governance and production-ready infrastructure. Discover how platform teams can bridge the gap between experimentation and compliance by implementing observability, structured context engineering, and ephemeral workspace patterns to ensure safe, scalable AI adoption. ## A framework for integrating AI into platform engineering DevFeed: [A framework for integrating AI into platform engineering]() Original publisher: [Read original article]() Author: Stéphane Teyssier Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [Artificial Intelligence](), [Security](), [Model Context Protocol (MCP)](), [shadow AI](), [cursor](), [GitHub Copilot](), [Claude](), [Developer experience](), [Template]() Tags: [ai](), [claude](), [configuration](), [cursor](), [developer-experience](), [github-copilot](), [model-context-protocol](), [platform](), [platform-engineering](), [shadow-ai](), [supply-chain]() ### AI overview This article presents a framework for integrating AI into platform engineering instead of allowing isolated AI silos. It focuses on standardizing AI coding assistants such as GitHub Copilot, Cursor, and Claude through platform templates, organizational prompts, development standards, security requirements, and approved MCP servers. The approach aims to reduce shadow AI, uncontrolled costs, security vulnerabilities, and compliance risks while improving developer experience and operational excellence. ### Source excerpt Avoid AI silos & shadow IT. This 5-stage framework shows how to seamlessly integrate AI into platform engineering for enhanced operations and security. ## Harness IDP AI Asset Catalog Organizes and Governs Prompts, Skills, Agents, Plugins, and Commands DevFeed: [Harness IDP AI Asset Catalog Organizes and Governs Prompts, Skills, Agents, Plugins, and Commands]() Original publisher: [Read original article]() Author: Rashmi Hegde Published: 2026-07-21T00:00:00Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [internal developer portal](), [shadow AI](), [Platform Engineering](), [Generative AI](), [Security]() Tags: [ai](), [catalog](), [discovery](), [git](), [governance](), [idp](), [platform-engineering](), [search](), [security](), [shadow-ai]() ### AI overview The article presents Harness IDP's AI Asset Catalog, which brings prompts, skills, agents, plugins, and custom commands into a governed software catalog. It describes Git-based discovery, semantic search, ownership and lineage mapping, and automated scorecards for risk and compliance. ### Source excerpt Harness IDP AI Asset Catalog helps teams discover, govern, and reuse AI assets with automated Git discovery, scorecards, and semantic search. | Blog ## Introducing the Giant Swarm Agent Platform: Agents that run where your data lives DevFeed: [Introducing the Giant Swarm Agent Platform: Agents that run where your data lives]() Original publisher: [Read original article]() Author: Henning Lange Published: 2026-07-07T18:33:18Z Content type: release Language: en Sources: [Giant Swarm Blog]() Topics: [AI Agent](), [AI Platform](), [audit trail](), [shadow AI]() Tags: [agents](), [ai](), [ai-agents](), [audit-trail](), [platform](), [product](), [shadow-ai](), [tooling]() ### AI overview Giant Swarm introduces an agent platform designed to run AI agents on events rather than user clicks, with isolated execution, scoped tool access, and logged decisions for unattended production use. ### Source excerpt Your engineers are already running AI agents. Not as an approved rollout, but as something that crept in over the past year, wired into whatever tools got a task done. ## 1Password is a Leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms DevFeed: [1Password is a Leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms]() Original publisher: [Read original article]() Author: info@1password.com (1Password) Published: 2026-06-23T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [SaaS Management](), [shadow AI](), [MCP Server](), [OAuth](), [Single sign-on (SSO)](), [Security]() Tags: [agents](), [ai](), [ai-agents](), [mcp-server](), [oauth](), [saas](), [saas-management](), [security](), [shadow-ai]() ### AI overview 1Password announces that it has been recognized as a leader in the 2026 Gartner Magic Quadrant for SaaS Management Platforms. The article presents SaaS Manager as a way for IT and security teams to discover unapproved AI use, monitor applications and spending, identify token-budget overruns, govern access outside SSO, and automate governance workflows through an MCP Server. ### Source excerpt Recognized for Completeness of Vision and Ability to Execute 1Password has been recognized as a leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms. SaaS Manager gives IT and security teams visibility into unapproved AI use and every app, AI tool, and dollar spent across their organization. This foundation lets teams identify real-time AI token overruns before mid-year budget surprises hit, cut wasted license spend, and reduce friction for employees requesting access. The platform closes the access gaps that happen outside of SSO, governing human access across the full employee lifecycle and enabling AI agents to automate governance workflows through an MCP Server. We believe our placement in the Gartner® Magic Quadrant™ reflects our vision that with the right controls, SaaS management can help a business move faster. Get the full analysis [Read the Gartner® Magic Quadrant™ for SaaS Management Platforms](https://1password.com/resources/gartner-magic-quadrant-saas-management-platforms-2026) Identity Access Management doesn't show the full picture of AI token consumption and SaaS access Employees aren't waiting for IT approval to adopt AI. The 1Password Access-Trust Gap Report found that 27% of knowledge workers were using AI-based applications that their employer didn't approve. Coding assistants, productivity tools, and AI platforms are being connected to work accounts, granted API access, and signed in with corporate credentials, often through a single "sign in with Google" OAuth token that leaves no trace in the identity provider. IT has no record of these AI tools, no visibility into what data enters the AI's context window, and no way to revoke access. When those tools run on consumption-based pricing, annual AI token budgets are being depleted within months, with no signal to finance until the allocation is nearly gone. SaaS sprawl has been a known cybersecurity problem for years, and until recently, traditional identity management was suf ## 1Password shows 370% YoY growth in Okta research report DevFeed: [1Password shows 370% YoY growth in Okta research report]() Original publisher: [Read original article]() Author: info@1password.com (1Password) Published: 2026-05-12T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [shadow AI](), [Artificial Intelligence]() Tags: [agentic-ai](), [ai](), [ai-agents](), [business](), [canada](), [enterprise](), [news](), [platform](), [security](), [shadow-ai](), [startups](), [technology]() ### AI overview 1Password's users on the Okta platform grew 370% year over year in the technology sector, reflecting rising enterprise demand for identity security as organizations adopt AI-powered workflows and agents. ### Source excerpt 1Password has never been more popular in the workplace. Okta's 2026 "Businesses at Work" report reveals that, of the 8,000+ apps that Okta analyzed, "The security tool 1Password showed the highest industry-level growth, notching a 370% YoY increase in the technology sector." This statistic refers specifically to the number of individual 1Password users on the Okta platform, indicating a sharp increase in the rollout and adoption of 1Password across business users. This growth is no coincidence. As 1Password becomes foundational to how employees build and operate AI-powered workflows, it is increasingly embedded in the critical path of the modern "AI builder." The result is a surge in demand for secure access across tools, credentials, and agents, starting in the technology sector and expanding outward. Key findings from Okta's 2026 Businesses at Work report: 1Password recorded 370% year-over-year user growth in the technology sector, the highest industry-level growth of any app on the Okta platform 1Password is the fastest-growing app in Canada on the Okta platform 1Password ranked as the #13 most popular app among startups on Okta What drove 1Password's growth on Okta's platform? The stated purpose of Okta's report is to: "...track how enterprise technology adoption continues to evolve, and... how identity strategies must evolve alongside it." 1Password's dramatic growth among Okta customers reflects our company's evolution. Our innovations in AI and agentic security are resonating deeply with enterprise customers, many of whom are seeking to adapt their identity security strategies to securely enable AI across their workforces and technology stacks. Okta's report also reveals that agentic AI is an urgent need, since 91% of the organizations they surveyed are using AI agents. The majority of those orgs, however, are in early or limited stages of agent deployment. It's not hard to understand why; the identity and access risks posed by AI can significantly hamper a com ## Hardcoding Security into Every Commit: The Future of Snyk Secrets DevFeed: [Hardcoding Security into Every Commit: The Future of Snyk Secrets]() Original publisher: [Read original article]() Author: Kate Powers Burke; Waleed Arshad Published: 2026-04-23T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [AI Agent](), [Application Security](), [API keys](), [passwords](), [Model Context Protocol](), [shadow AI]() Tags: [ai](), [ai-agent](), [ai-agents](), [api-keys](), [application-security](), [awareness](), [blog](), [ci-cd](), [developer](), [devops](), [docker](), [enablement](), [engineering](), [executive](), [interest](), [kubernetes](), [model-context-protocol](), [passwords](), [prompt-injection](), [scm](), [secrets](), [security](), [shadow-ai](), [snyk-platform](), [snyk-security-intel](), [software-development](), [tech](), [vs-code](), [vulnerability]() ### AI overview Snyk describes how cloud-native development and AI-generated code are increasing secret sprawl across repositories, CI/CD logs, and collaboration tools. The article argues that autonomous AI agents expand this risk by creating and executing credentials, connecting to MCP servers, and changing systems without human visibility. It presents Snyk Secrets as a real-time approach to detecting exposed sensitive data while maintaining developer speed. ### Source excerpt Snyk Secrets bridges the gap between code and credentials with real-time, high-precision detection, ensuring your most sensitive data stays hidden while your developers stay fast. ## Beyond Compliance: Building Security That Protects Patients and Innovation DevFeed: [Beyond Compliance: Building Security That Protects Patients and Innovation]() Original publisher: [Read original article]() Author: ZOHRA IBRAHIMI, INFORMATION SECURITY PRACTICE LEAD @ TOPTAL Published: 2026-04-12T22:00:00Z Content type: article Language: en Sources: [Toptal Blog]() Topics: [Cybersecurity](), [Security & Privacy](), [AI Strategy](), [shadow AI](), [supply-chain-security]() Tags: [ai](), [ai-adoption](), [cybersecurity](), [governance](), [healthcare](), [podcast](), [risk-management](), [security](), [shadow-ai](), [supply-chain-security]() ### AI overview A podcast discussion about healthcare cybersecurity with Orus Dearman of iRhythm Technologies and Zohra Ibrahimi of Toptal. They examine how security leaders balance compliance, innovation, reliability, and patient trust, including governance for AI adoption, shadow AI risk, vendor ecosystems, and supply-chain security. ### Source excerpt As healthcare systems become more digital and interconnected, cybersecurity leaders must protect sensitive patient data while ensuring critical technology remains reliable and accessible. In this episode of the Executive Guidance podcast, Orus Dearman, Chief Information Security Officer at iRhythm Technologies, joins Zohra Ibrahimi, Toptal's Cyber and Information Security Practice Lead, to discuss how healthcare security leaders balance compliance, innovation, and trust. ## Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program DevFeed: [Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program]() Original publisher: [Read original article]() Author: Rudy Lai Published: 2026-04-01T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Securing AI](), [Generative AI](), [shadow AI](), [ai security](), [Security](), [Automation]() Tags: [agentic](), [agents](), [ai](), [ai-adoption](), [ai-security](), [application-security](), [aspm](), [automation](), [awareness](), [blog](), [ci-cd](), [compliance](), [customer](), [customer-featured](), [developer](), [devops](), [executive](), [finserv](), [generative](), [generative-ai](), [interest](), [pmm](), [policy](), [retail](), [scale](), [security](), [shadow-ai](), [snyk-apprisk](), [snyk-platform](), [tech]() ### AI overview Snyk shares five lessons from its Evo design partner program for securing generative AI. The article emphasizes discovering AI sprawl and shadow AI, understanding custom AI deployments, replacing static spreadsheets, enforcing governance policies, and using actionable risk intelligence to move AI from chaos to controlled production. ### Source excerpt Learn 5 key lessons from Snyk's Evo design partner program. Discover how AI discovery, risk intelligence, and policy automation help teams secure generative AI and govern AI sprawl at scale. ## Introducing Agent Security DevFeed: [Introducing Agent Security]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2026-03-23T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI Agent](), [Securing AI](), [Artificial Intelligence](), [shadow AI](), [prompt injection](), [supply-chain-security](), [Security](), [data]() Tags: [agents](), [ai](), [ai-security](), [americas](), [application-security](), [applications](), [aspm](), [awareness](), [blog](), [ci-cd](), [code-security](), [compliance](), [developer](), [development](), [devsecops](), [executive](), [interest](), [pmm](), [production](), [prompt-injection](), [security](), [security-labs](), [shadow-ai](), [snyk-code](), [snyk-platform](), [supply-chain](), [supply-chain-security](), [tech]() ### AI overview Snyk introduces Agent Security, a unified approach to securing the AI agent lifecycle from code to runtime. The announcement presents Evo AI-SPM as a generally available foundation for inventorying, governing, and enforcing controls over AI models, agents, tools, and related risks, including shadow AI, prompt injection, data leakage, and unsafe agent actions. ### Source excerpt Introducing Agent Security, a unified approach to governing AI agents and ensuring safe behavior from code to runtime. Start with Evo AI-SPM, now generally available. ## What cybersecurity professionals are saying about AI DevFeed: [What cybersecurity professionals are saying about AI]() Original publisher: [Read original article]() Published: 2024-09-26T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Cybersecurity](), [Artificial Intelligence](), [Generative AI](), [shadow AI](), [supply-chain-security]() Tags: [ai](), [cybersecurity](), [generative-ai](), [security](), [shadow-ai](), [software-supply-chain]() ### AI overview The article examines how generative AI is creating new cybersecurity challenges for CISOs, including harder-to-detect attacks, malware creation, phishing, and unauthorized employee use of AI tools. It also discusses the resulting risks to monitoring, third-party products, and the software supply chain. ### Source excerpt AI is keeping CISOs up at night. Learn about risks of generative AI and Shadow AI, and how to secure your AI deployments with Chainguard.