Free tier

The free shadow AI audit, without the fine print

Upload a log export, get real totals for your whole network, free. This page states exactly what the preview shows, what it withholds and where the limits sit, so nothing surprises you.

$0no card, registration with an email only
1 / dayfree previews per account, 3 a month
5,000lines per free export, up to 2 MB
5+AI tools named, a fifth of everything found
The full list

What the free preview genuinely shows

These are complete, network-wide numbers, not samples. The preview totals are the same totals the paid report shows.

Totals by category

Every AI tool found, counted per functional category. The full distribution, nothing sampled.

Risk-flag counts

How many high-risk tools, how many that train on user data, how many abusive-purpose tools. Real counts.

Top tools, named

A fifth of the AI tools found, at least five, listed by name with category, risk and training verdict.

Withheld rows you can count

Every unnamed tool appears as a masked row in the table. You see exactly how many findings exist.

A shareable preview PDF

The preview renders as a PDF you can forward. Most upgrade decisions happen after someone shares it.

A repeatable baseline

Run it monthly within the free caps. Rising category totals are a signal even without every name.

The mechanic

How withheld rows work

The preview does not hide that it is a preview. It shows you the shape of what you have not paid for.

Preview tool table, sample data
DomainTrainingRiskHits
chatgpt.comOpt-out switchmedium412
grammarly.comOpt-out switchmedium178
perplexity.aiOpt-out switchmedium132
unlockunlockunlock
unlockunlockunlock
unlockunlockunlock

...and one masked row for every further tool found.

Why we show the gaps

A preview that silently truncates makes the network look cleaner than it is. That would be a dangerous document to circulate.

  • One masked row per hidden tool means the row count is the real finding count.
  • The named fifth is chosen by usage, so the biggest habits are visible immediately.
  • Risk counts in the tiles include the masked tools. A "3 high-risk" tile can mean three tools you cannot see yet.

That last point is deliberate. Knowing that high-risk tools exist is free; knowing which ones costs $99.

Boundaries

Every free-tier limit in one table

The caps exist to keep the preview useful for evaluation while the full report carries the commercial load.

LimitFree previewWhy it is set there
RegistrationEmail address onlyReports need an account to live in for 90 days.
Runs1 a day, 3 a monthEnough for a baseline and a re-check, not for free monitoring.
Export size5,000 lines / 2 MBCovers small networks fully and gives large ones an honest sample.
Tools namedA fifth, minimum fiveThe biggest habits become visible; the inventory stays paid.
Per-user tableNot includedIdentity-level findings are the full report's core value.
CSV exportNot includedMachine-readable output ships with the paid tiers.
Sanctioned splitCounts onlyThe named split needs the full tool list by definition.

Free or paid, the uploaded export is read once and discarded. Reports stay in your account for 90 days and can be deleted earlier.

Worked example

A 40-person agency runs the free preview

Small networks often fit inside the free tier entirely. This is what that looks like.

The export

Seven days of DNS logs from their filter: 3,800 lines, well under the 5,000-line cap. Identity column included.

The totals

14 AI tools across 6 categories. Two flagged as training by default, none abusive.

The named five

The top five by usage cover the design tools the founders already suspected, plus one transcription tool they did not.

The decision

Nine masked rows were enough to justify one $99 report. The full list took the Friday meeting from guesses to a policy.

At 40 people this network fit the free cap with room to spare. The sizing table shows where larger networks land.

Decision aid

When the preview is enough, and when it is not

We would rather you use the right tier than upsell you. The split is clean.

The preview is enough when you need

  • A yes/no answer to "do we have a shadow AI situation at all".
  • A number for a budget conversation, before anyone commits spend.
  • A monthly pulse check on category totals for a small network.
  • Proof that the export pipeline works before a bigger engagement.

You need the full report when

  • Someone will act on tool names: sanctioning, controlling or blocking specific products.
  • You need the per-user breakdown for coaching or investigation.
  • An auditor, client or board needs the evidence pack and CSV filed.
  • The masked rows outnumber the named ones and the tiles show red.

The upgrade is a one-time $99, not a subscription, and packs bring it to $60 a report. The math lives on the pricing page.

The exact PDF your board would receive

Before running anything, flip through the sample evidence pack. The preview you get free is this document with most rows masked.

Open the sample report
Getting the most from it

Six ways to make one free run count

You get one preview a day. Spend it like it costs something.

Filter to allowed traffic first

Blocked events measure your filter. Allowed events measure your exposure, and they use the 5,000 lines better.

Pick a typical week

Avoid holiday weeks and company offsites. One representative week beats a strange fortnight.

Keep the identity column

The preview does not show per-user data, but running the same export after an upgrade does. Same file, more report.

Export web traffic only

If your console can filter to web or DNS categories, do it. Mail and infrastructure noise spends lines for nothing.

Screenshot the tiles

The five summary tiles are the meeting-starter. They fit one slide and need no explanation.

Book the re-run now

Put next month's preview in the calendar before reading this month's. Trends beat snapshots, see the cadence loop.

Minute by minute

What happens after you click run

The whole free path, from landing to PDF, with nothing skipped.

Minute 0: register

Email address, confirmation link, done. No company fields, no phone number, no qualification form.

Minute 1: upload

Drag the export onto the panel. The parser announces the detected format and the line count before running.

Minute 2: the run

Hostnames are extracted, deduplicated and matched. The upload itself is discarded the moment parsing ends.

Minute 3: the tiles

Totals land first: tools found, high-risk count, training exposure, abusive tools, unsanctioned count.

Minute 4: the table

The named fifth appears with verdicts, followed by one masked row per withheld tool.

Minute 5: the PDF

Download the preview pack, forward it, and decide with your team whether the masked rows are worth $99.

Per department

Questions the free totals already answer

Even without every name, complete category totals settle real arguments.

Marketing

"Are we generating client-facing content with unvetted image tools?" A non-zero Image & Visual total answers it.

Engineering

"Is company code leaving through code assistants?" The Code & Development count says whether the conversation is needed.

Support and sales

"Are customer conversations being pasted into chatbots?" Text & Language plus transcription totals frame the exposure.

Leadership

"Is this a real problem or IT paranoia?" A tile row with red in it ends that debate in one glance.

Compliance

"Do we have tools that train on data by default?" The training count is exact, even in the free tier.

Security

"Anything abusive-purpose on our network?" That tile being zero is worth documenting; non-zero is worth escalating.

Department-by-department anatomy of where shadow AI concentrates lives on the examples page.

Free vs "free"

How this free tier compares to the usual ones

Security vendors use "free" three different ways. Only one of them respects your time.

The patternWhat it actually costsThis preview
"Free assessment" = sales callAn hour with an SDR before any data is touched.Self-serve. Nobody calls unless you ask.
"Free trial" = clock and card14 days, card up front, cancellation admin.No card, no clock. Caps, not deadlines.
"Free scan" = fear reportVague severity scores designed to alarm.Exact counts, named top tools, and the gaps drawn honestly.

The upgrade path is a $99 one-time purchase, not a subscription negotiation. That is the whole commercial model, detailed on the pricing page.

FAQ

Free audit questions

Is the free audit actually free?

Yes. No card, no trial clock, no sales call. Registration needs an email address because reports live in an account.

Why is anything withheld at all?

The register behind the audit is a daily-maintained commercial product. The preview shows real totals; the full inventory is what you pay for.

Are the preview totals sampled or complete?

Complete, across your whole export. Only the tool names are partially withheld, never the counts.

What happens when I hit the monthly cap?

The fourth run in a month asks you to wait or upgrade. Caps reset monthly, and paid reports have no such cap.

Can I go from preview to full report without re-uploading?

Buying a report unlocks full runs. Re-upload the same export and the full report covers the identical window.

My export is bigger than 2 MB. Now what?

Shorten the window for the preview, or go straight to a full report which takes 25 MB and 2,000,000 lines.

Analyst's pass

Reading a preview like it is your job

Five reads, in order, and what each one decides. Ten minutes total.

1. The abusive tile first

Zero means proceed calmly. Non-zero means the full report, today, and probably HR in the loop.

2. Training exposure next

Add "trains by default" and "opt-out" tools together. That number is how many vendors may already hold your prompts.

3. Named tools vs expectations

Write down the five tools you expected before opening the table. The overlap with the named fifth is usually under half.

4. Count the masked rows

Multiply by your discomfort. Twelve unknown tools in a regulated business reads differently than in a design studio.

5. Category vs department map

Each category total should have an owner. A category with a big total and no obvious owner is your first meeting invite.

Then: decide once

Enough signal? Book the monthly re-run. Not enough? One report, $99, and the decision-aid above tells you which you are.

Why the caps exist

The honest reason for every limit

Each cap has one job. None of them is "make the free tier annoying".

The register is the product

Daily classification of ~300,000 domains is a paid operation. Unlimited free inventories would be the product for free.

Anti-enumeration

Per-day and per-month caps stop scripted walking of the register through repeated uploads.

Shared capacity

Site-wide daily ceilings keep run times in minutes for everyone, free and paid alike.

Second scenario

An MSP uses the free preview as a door-opener

Service providers run the free tier differently: not on their own network, but as the first ten minutes of a client conversation.

The setup

During a quarterly review, the MSP asks the client for a one-week DNS export. The client's own admin pulls it in five minutes, so no access questions arise.

The run

The preview comes back with 21 tools across 8 categories, two of them training on data by default. The client expected "maybe ChatGPT".

The pivot

The masked rows do the selling. Nineteen unnamed tools on the screen turn a routine QBR into a scoped assessment engagement.

The economics

The MSP delivers the full audit through their plan allowance, with the client's name on the report. The whole play is costed on the MSP page.

Your first real numbers, free, today

One log export, one upload, and the guessing stops. The preview tells you whether there is anything worth paying to see.

Run the free audit