Agent discovery & inventory
SASE-delivered product that identifies which generative AI applications employees are using by matching network traffic against a maintained dictionary of GenAI apps grouped into predefined use cases, then applying access-control and DLP policy. It discovers app usage, not internally built agents or AI components in code.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent discovery & inventory · Runtime authorization & controls · Data governance & privacy
Useful conversation with: CISO, Network security engineer, SASE administrator.
Demonstrate the Insights dashboard showing the top GenAI apps by user and use case in our traffic, and how a new app appears once it is added to the app dictionary.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Documented by provider
Provides visibility into hundreds of GenAI applications grouped into predefined use cases, with an Insights dashboard for discovering activity and risky behaviour by app, user and use case.
Limit: Discovery is bounded by the vendor-maintained GenAI app list and by traffic traversing Palo Alto enforcement points.
Documented by provider
The product targets inadvertent data leakage in prompts and file uploads, combining GenAI app identification with fine-grained access control policy rules and Enterprise DLP detection.
Limit: Documentation does not establish coverage of autonomous agent traffic or MCP-based flows.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction