← Back to Home
Shadow AI

Find the agentsyou didn’t know about.

Compare available AI traffic logs with Fabriq records. Investigate what doesn’t match.

Get a free assessment
01 / Start with the evidence

Upload or stream.
Start with your network logs.

Upload network logs for a snapshot, or stream them for ongoing discovery. Fabriq matches incoming activity against known agents and recorded calls.

Two ways to bring your logs
Upload logsImport a network log export.CSV, TSV, or JSON
Stream logsFeed network activity continuously. Ongoing discovery
Signals from your environment
Cloudflare
Zscaler
Palo Alto
Datadog

Proxy, firewall, and SIEM logs.
Discovery depends on the signals you provide.

Connect the signal to the agent.
ACTIVITY RECONCILIATION
NETWORK LOGSFABRIQ RECORDS
WHY THIS NEEDS REVIEW

Known agent. Unmatched call.

The source points to forecast-worker, but no corresponding Fabriq call was found. Inspect the route to understand the gap.

Agent identifiedNo matching call
Illustrative example · Select a signal to inspect its context
02 / Understand the finding

A flag should come
with a reason.

Each classification keeps the evidence separate from the conclusion. A missing match is a reason to investigate, not proof of misuse.

FINDING / 01

Matched call

The identity and call line up.

Known agent
Fabriq call
Policy recorded

Review the recorded decision.

FINDING / 02

Coverage gap

A known caller. A missing record.

Known agent
No matching call
Route to investigate

Check how this connection reached the service.

FINDING / 03

Unresolved source

A connection without a clear owner.

Caller unknown
AI-bound signal
More context needed

Use source, time, and available user or IP details.

Consumer AI chat activity is counted separately. A visit to an AI chat service does not, by itself, identify an agent.

03 / Always watching

Shadow AI discovery.
Around the clock.

Fabriq checks incoming logs against known agent activity, 24/7. New or unmatched signals stay visible for review.

Coverage and freshness depend on connected logs. Discovery identifies activity; policy enforcement requires a configured Fabriq access path.

24/7CONTINUOUS DISCOVERY
Logs arriveReceive
Known agents matchedIdentify
Unknown activity surfacedReview
See what your logs can tell you

Start with a free
Shadow AI assessment.

Talk with our team about your available log sources and where to begin investigating AI activity.

Request your assessment