{"id":13838,"date":"2026-10-02T08:09:37","date_gmt":"2026-10-02T05:09:37","guid":{"rendered":"https:\/\/www.withsecure.com\/?p=13838"},"modified":"2026-10-02T08:11:26","modified_gmt":"2026-10-02T05:11:26","slug":"introducing-ai-security-in-withsecure-elements","status":"publish","type":"post","link":"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/","title":{"rendered":"Introducing AI Security in WithSecure\u2122 Elements"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 wp-block-one-column-block--meta-sharing layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <div class='wp-block-one-column-block__meta-sharing-grid'><div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Introducing AI Security in WithSecure\u2122 Elements: <span class=\"blue-text\">Seeing Shadow AI Before It Becomes a Breach<\/span><\/h1>                    <div class=\"wp-component-content__inner\">\n                                                    <div class=\"wp-component-content__meta\">\n                                                    <span class=\"wp-component-content__content-type\">\n                                Blog                            <\/span>\n                                                                            <span class=\"wp-component-content__meta-categories\">\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        AI Security                                    <\/span>\n                                                            <\/span>\n                                                                                                    <span class=\"wp-component-content__meta-date\">\n                                02 October, 2026                            <\/span>\n                                                                    <\/div>\n                                            <\/div>\n                <\/div><section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--content-1 wp-block-sharing-icons--disable-container wp-block-one-column-block__sharing fade-in wp-block-one-column-block__sharing fade-in\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/&#038;title=Introducing%20AI%20Security%20in%20WithSecure\u2122%20Elements\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link\" title=\"Share on Linkedin\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a href=\"http:\/\/x.com\/share?text=Introducing AI Security in WithSecure\u2122 Elements&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link wp-component-socials__link--twitter\" title=\"Share on Twitter\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n<\/div>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-content-25-1 wp-component-image--fit-cover\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                                                    <\/figure>\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-sidebar layout--none-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_08b543213578456373b694229f51d9d0\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <nav\n    class=\"wp-component-content-navigation wp-block-two-column-block__content-nav js-content-navigation\"\n    data-bem-base=\"wp-component-content-navigation\"\n    data-nav-column=\"left\"\n    data-nav-type=\"auto\"\n>\n            <p class=\"wp-component-content-navigation__title\">\n            Content        <\/p>\n    \n    <div class=\"wp-component-content-navigation__mobile\">\n        <label class=\"wp-component-content-navigation__mobile-label\">\n            <span class=\"wp-component-content-navigation__mobile-label-text\">\n                Content navigation            <\/span>\n            <select class=\"wp-component-content-navigation__select js-content-navigation-select\">\n                <option value=\"\">\n                    Select a section                <\/option>\n                            <\/select>\n        <\/label>\n    <\/div>\n\n    <div class=\"wp-component-content-navigation__desktop\">\n        <div class=\"wp-component-content-navigation__list-wrapper\">\n            <span\n                class=\"wp-component-content-navigation__indicator js-content-navigation-indicator\"\n                aria-hidden=\"true\"\n            ><\/span>\n            <ul class=\"wp-component-content-navigation__list js-content-navigation-list\">\n                            <\/ul>\n        <\/div>\n    <\/div>\n<\/nav>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__hide-mobile wp-block-two-column-block__share wp-block-two-column-block__hide-mobile\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/&#038;title=Introducing%20AI%20Security%20in%20WithSecure\u2122%20Elements\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link\" title=\"Share on Linkedin\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a href=\"http:\/\/x.com\/share?text=Introducing AI Security in WithSecure\u2122 Elements&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link wp-component-socials__link--twitter\" title=\"Share on Twitter\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <p><span data-contrast=\"none\">WithSecure\u2122 Elements is rolling out AI security in stages, starting with visibility. The first release surfaces shadow AI software, AI browser extensions, and AI or agentic identities across the organisation, so partners and IT teams can finally see what&#8217;s already running before deciding what to do about it.<\/span><span data-ccp-props=\"{&quot;335559739&quot;:120}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\"><span class=\"blue-text\">\u2713<\/span>\u00a0 <\/span><\/b><span data-contrast=\"none\">AI software, including shadow AI nobody approved, now shows up directly in software inventory, with no need for the app to be installed locally.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b class=\"blue-text\"><span data-contrast=\"none\">\u2713\u00a0 <\/span><\/b><span data-contrast=\"none\">Browser extension discovery flags AI sidebar tools such as ChatGPT and Perplexity running on managed endpoints.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\"><span class=\"blue-text\">\u2713<\/span>\u00a0 <\/span><\/b><span data-contrast=\"none\">AI and agentic identities, agents, chat assistants, coding assistants, and GenAI tools, become visible through the existing Microsoft Entra ID integration.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\"><span class=\"blue-text\">\u2713<\/span>\u00a0 <\/span><\/b><span data-contrast=\"none\">Machine identities are on track to outnumber human identities by more than 80 to 1, making this visibility gap urgent rather than theoretical.<\/span>[1]<\/p>\n<p><b><span data-contrast=\"none\"><span class=\"blue-text\">\u2713<\/span>\u00a0 <\/span><\/b><span data-contrast=\"none\">This is the first of several planned steps: visibility now, broader commercial AI security outcomes to follow.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559685&quot;:215,&quot;335559739&quot;:100,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Picking up where we left off<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\"><a href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-security-why-its-now-a-board-level-priority\/\">In our previous post<\/a>, we looked at why AI security has become a board-level issue: security teams brought in too late, shadow AI spreading by default, and AI agents multiplying faster than identity management can track them. This post is about what WithSecure is actually doing about it, starting with the part every other control depends on: visibility.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Why visibility has to come first<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Shadow AI is what happens when employees start using AI tools and browser extensions on their own, without IT ever knowing. And an organisation can&#8217;t protect data its security team doesn&#8217;t know is leaving the building. Left unmonitored, these tools can quietly collect large amounts of corporate information in the background, opening the door to compliance violations and, in the worst case, intellectual property walking out with it.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">What makes AI browser extensions risky?<\/span><span data-ccp-props=\"{&quot;335559738&quot;:240,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Many AI extensions ask for broad permissions just to work, including the ability to read and change data on every site a person visits. That&#8217;s a lot of trust to hand over. If the extension turns out to be malicious, or is compromised after the fact, an attacker can use that same access to pull sensitive data, credentials, and proprietary code straight from the pages an employee works in.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p aria-level=\"2\"><strong>Why can&#8217;t traditional antivirus catch this?\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">Antivirus and endpoint tools were built to scan files sitting on a hard drive. They weren&#8217;t built for threats that live entirely inside the browser. Malicious extensions often load their payload dynamically from a remote server after installation, so there&#8217;s no file to catch in the first place. Watching what happens in the browser at runtime, not just what&#8217;s sitting on disk, is what closes that gap.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><span data-contrast=\"none\">Identity is the other half of the problem<\/span><span data-ccp-props=\"{&quot;335559738&quot;:240,&quot;335559739&quot;:120}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Visibility into AI and agentic identities is increasingly the foundation the rest of AI security sits on: an organisation can&#8217;t govern, restrict, or monitor what it can&#8217;t see. Machine identities are expected to outnumber human identities by more than 80 to 1, and privileged AI agent identities are rising steeply.<\/span>[1]<\/p>\n<p><span data-contrast=\"none\">Every new AI agent, integration, or extension typically spins up its own credentials, tokens, or service accounts, most of which escape central tracking. Agents also tend to carry more privilege than the humans who built them, accumulating broad, standing access to move fast. Without visibility into what an agent can reach, that excess privilege becomes an unmonitored path for data exfiltration or lateral movement, the same logic as the browser-extension problem, just at agent scale.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">What&#8217;s shipping: baseline visibility into the AI attack surface<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">The first release focuses on one job: showing how AI is actually being used across the organisation, in a single place, for everyone already on WithSecure\u2122 Elements.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Shadow AI software visibility. <\/span><\/b><span data-contrast=\"none\">A dedicated AI Assets view inside software inventory lists every AI tool used within the organisation, including tools that were never formally installed.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">AI browser extension discovery. <\/span><\/b><span data-contrast=\"none\">Browser extensions installed across endpoints are discovered and tracked in the same software inventory, catching sidebar tools such as ChatGPT&#8217;s OpenAI extension or Perplexity before they become blind spots.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Browsing Protection for AI usage. <\/span><\/b><span data-contrast=\"none\">Existing Browsing Protection capability extends to AI-specific visibility and control at the browser level.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">AI and agentic identity visibility. <\/span><\/b><span data-contrast=\"none\">AI agents, AI chat assistants, AI coding assistants, and GenAI tools become visible through the existing Microsoft Entra ID integration, the same place identity is already managed.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<table data-tablestyle=\"MsoNormalTable\" data-tablelook=\"1696\" aria-rowcount=\"4\" aria-colcount=\"3\">\n<tbody>\n<tr aria-rowindex=\"1\">\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">Where AI hides<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">The risk<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td class=\"blue-text\" data-celllook=\"69905\"><b><span data-contrast=\"none\">What Elements now shows<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"2\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">Shadow AI software<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Employees adopt AI tools without IT ever knowing<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">AI Assets view in software inventory lists every AI tool in use, installed or not<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"3\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">AI browser extensions<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Sidebar AI tools (e.g. ChatGPT, Perplexity) request broad page access<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Browser extension discovery plus Browsing Protection flag and control AI usage at the browser<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<tr aria-rowindex=\"4\">\n<td data-celllook=\"69905\"><b><span data-contrast=\"none\">AI and agentic identities<\/span><\/b><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Agents, assistants, and GenAI tools spin up their own credentials, often unseen<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<td data-celllook=\"69905\"><span data-contrast=\"none\">Visibility into AI and agentic identities through the existing Microsoft Entra ID integration<\/span><span data-ccp-props=\"{}\">\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span data-contrast=\"none\">\u00a0<\/span><span data-ccp-props=\"{&quot;335559738&quot;:200}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">The thinking behind it<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Two ideas anchor this: <\/span><b><span data-contrast=\"none\">confidence with AI<\/span><\/b><span data-contrast=\"none\">, meaning the ability to defend at the speed AI-driven attacks move, not behind it, and <\/span><b><span data-contrast=\"none\">confidence for AI<\/span><\/b><span data-contrast=\"none\">, meaning being able to see what AI is doing across the estate and prove it&#8217;s controlled.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">For partners, the aim is just as practical: a new angle inside the security services already being sold, fitting inside the bundles partners already offer rather than requiring a new console, plus the productivity uplift that comes from AI-assisted detection and response.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">What&#8217;s next<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Visibility comes first, because nothing else works without it. Broader, commercial AI security outcomes, extending from visibility into remediation and response, are next in the pipeline, with a fuller AI-native layer within Elements to follow further out. We&#8217;ll cover each step as it ships.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"1\"><span data-contrast=\"none\">Frequently asked questions<\/span><span data-ccp-props=\"{&quot;335559738&quot;:400,&quot;335559739&quot;:160}\">\u00a0<\/span><\/h2>\n<p><b><span data-contrast=\"none\">What is shadow AI?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Shadow AI is any AI tool or extension employees use without IT&#8217;s knowledge or approval, from browser-based chat assistants to standalone apps. It creates a security blind spot because nobody has assessed what data it can access.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Why can&#8217;t antivirus catch malicious AI browser extensions?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Antivirus tools scan files on disk. Many malicious extensions load their payload dynamically from a remote server after installation, so there&#8217;s no file to scan. Runtime, browser-level visibility is needed instead.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">What counts as an agentic identity?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">Any credential, token, or service account created for an AI agent, chat assistant, coding assistant, or GenAI tool to act on a system, often with more standing privilege than the human who set it up.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Do I need to install anything to see shadow AI usage?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">No. AI software shows up in the software inventory view whether or not the tool was formally installed, and browser extensions are discovered automatically across managed endpoints.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">Is this a new product or part of an existing subscription?<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:160,&quot;335559739&quot;:60}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">These initial capabilities are included in the existing WithSecure\u2122 Elements offering. Broader AI security outcomes are planned as the roadmap develops.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:60,&quot;335559740&quot;:319}\">\u00a0<\/span><\/p>\n<p aria-level=\"1\"><strong>See it for yourself\u00a0<\/strong><\/p>\n<p><span data-contrast=\"none\">If AI is already running somewhere in your environment, and it almost certainly is, the first step is simply seeing it. Log in to WithSecure\u2122 Elements to check what&#8217;s showing up in your AI Assets view, <a href=\"https:\/\/www.withsecure.com\/en\/contact-us\/\">or talk to us if you want a walkthrough.<\/a><\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:338}\">\u00a0<\/span><\/p>\n<p aria-level=\"1\"><strong>Sources:\u00a0<\/strong><\/p>\n<p><b><span data-contrast=\"none\">[1] <\/span><\/b><a href=\"https:\/\/www.forrester.com\/blogs\/category\/iam-identity-access-management\/\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">Forrester, \u201cGlobal IAM Market Forecast, 2024 to 2029,\u201d January 2026 <\/span><\/a><\/p>\n<\/div>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/&#038;title=Introducing%20AI%20Security%20in%20WithSecure\u2122%20Elements\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link\" title=\"Share on Linkedin\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a href=\"http:\/\/x.com\/share?text=Introducing AI Security in WithSecure\u2122 Elements&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\" target=\"_blank\" rel=\"noreferer noopener\" class=\"wp-component-socials__link wp-component-socials__link--twitter\" title=\"Share on Twitter\">\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n        <div class=\"wp-component-content wp-component-content--default wp-block-cards__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Blog <span class=\"blue-text\">post<\/span><\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Read our latest blogs<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                            <div class=\"wp-block-cards__cards row-load\">\n                    <div class=\"wp-component-card-insight wp-block-cards__card wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Introducing AI Security in WithSecure\u2122 Elements<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">WithSecure\u2122 Elements now surfaces shadow AI, AI browser extensions, and agentic identities in one place. Here&#039;s what&#039;s shipping, and why visibility comes first.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI<\/span>\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">AI Security: Why It&#8217;s Now a Board-Level Priority<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">AI security is now a board-level issue. See the real pain points, what AI security actually means, and the steps to get ahead of it.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-security-why-its-now-a-board-level-priority\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"163\" height=\"130\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/04\/AV-comparatives.svg\" class=\"wp-component-card-insight__image\" alt=\"\" \/>                    <p class=\"wp-component-card-insight__content-type\">Industry Recognition<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Endpoint Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Certified Leader in AV-Comparatives&#8217; Endpoint Prevention and Response<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">AV-Comparatives named WithSecure \u2018Certified Leader\u2019 for Endpoint Prevention and Response (EPR), \u2018Advanced+ Performance\u2019 for Windows, \u2018Advanced Real-World Protection\u2019 for Windows, \u2018Approved Mac Security\u2019 for MacOS and \u2018Approved Mobile Security\u2019 for Android.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/strategic-leader-in-av-comparatives-endpoint-prevention-and-response\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>                <\/div>\n                                                <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>WithSecure\u2122 Elements now surfaces shadow AI, AI browser extensions, and agentic identities in one place. Here&#8217;s what&#8217;s shipping, and why visibility comes first.<\/p>\n","protected":false},"author":20,"featured_media":13826,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[273],"tags":[],"content_type":[],"class_list":["post-13838","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-security"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg\" class=\"wp-component-card-insight__image\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg 1920w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg 1024w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg 768w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg 1536w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg 700w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Introducing AI Security in WithSecure\u2122 Elements<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">WithSecure\u2122 Elements now surfaces shadow AI, AI browser extensions, and agentic identities in one place. Here&#039;s what&#039;s shipping, and why visibility comes first.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/introducing-ai-security-in-withsecure-elements\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/13838","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=13838"}],"version-history":[{"count":7,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/13838\/revisions"}],"predecessor-version":[{"id":13856,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/13838\/revisions\/13856"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media\/13826"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=13838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/categories?post=13838"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/tags?post=13838"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/content_type?post=13838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}