DutyGraphAI governance directory

Agent discovery & inventory

Obsidian Security Shadow AI

Module of Obsidian's SaaS security platform that builds a continuously updated inventory of AI tools and agents by combining a managed browser extension, API integrations into SaaS tenants, and mapping of agent-to-MCP connections. Aimed at security teams; agent coverage depends on which SaaS tenants and endpoints are instrumented.

commercial · generally available · Research snapshot 2026-09-06

Visit the official product source ↗

Where it fits

Agent discovery & inventory · Agent security & threat detection · Data governance & privacy

Useful conversation with: CISO, SaaS security lead, Security operations manager.

Ask for a demonstration

Show me an agent discovered only by your browser extension that never appeared in the SaaS platform's own API-reported agent list, with its creator, permissions, and MCP connections.

Capabilities and evidence

Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.

Vendor claim

Combines browser-level discovery, API integration scanning, and agent monitoring into a single continuously updated inventory of AI tools, AI features inside SaaS apps, and agents.

Limit: Product marketing page; does not enumerate which SaaS platforms are covered by API scanning or which browsers the extension supports.

Source s1

Vendor claim

Vendor states that API-only agent inventories miss agents that were not created through official channels, and reports agent counts across its customer base growing to roughly 95,000 by February 2026.

Limit: Self-reported telemetry from Obsidian deployments; not independently verified and not a capability guarantee.

Source s2

Vendor claim

A browser extension monitors and can block sensitive data entered into third-party AI tools in real time.

Limit: No documentation reviewed on detection accuracy, supported browsers, or bypass behavior for native desktop AI apps.

Source s1

Limitations to discuss

Sources

  1. Shadow AI Security: Discover, Govern, and Control Every AI Tool · Obsidian Security · official product
    Access date reported by researcher: 2026-09-06
  2. The AI Agents Your Security Tools Can't See · Obsidian Security · other
    Access date reported by researcher: 2026-09-06

Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.

Suggest a correction