Platform Guides

Shadow AI Detection Guides by Platform

Step-by-step instructions for exporting DNS, proxy and firewall logs from the ten most common platforms, so you can feed them straight into a shadow AI audit.

DNS and Secure Web Gateway

Cloud-managed DNS resolvers and secure web gateways that log every domain query across your workforce.

Cisco

Cisco Umbrella Shadow AI Detection

Export Umbrella DNS logs via the reporting API or S3 bucket, map AI domains and build a sanctioned-tool register from Cisco's activity feed.

DNSCloud
Read guide
Zscaler

Zscaler Shadow AI Detection

Pull ZIA web logs via Nanolog Streaming Service or the API, filter for AI tool domains and quantify unsanctioned usage across departments.

ProxyCloud
Read guide
Cloudflare

Cloudflare Gateway Shadow AI Detection

Use Gateway DNS and HTTP logs from Cloudflare Zero Trust to identify AI tool usage without deploying additional agents.

DNSZero Trust
Read guide
NextDNS

NextDNS Shadow AI Detection

Download NextDNS query logs via the API, match against AI tool domains and create a lightweight shadow AI audit for small teams.

DNSSaaS
Read guide
DNSFilter

DNSFilter Shadow AI Detection

Export DNSFilter query logs and use category-based reporting to surface AI and machine-learning tool traffic across your network.

DNSSaaS
Read guide
Pi-hole

Pi-hole Shadow AI Detection

Parse Pi-hole query logs from the local database or long-term log files to find AI tool domains across on-premises networks.

DNSSelf-hosted
Read guide

Next-Generation Firewalls

Enterprise firewalls with application-layer visibility that can export the traffic data needed for a shadow AI audit.

Palo Alto Networks

Palo Alto Shadow AI Detection

Export PAN-OS traffic and URL filtering logs via syslog or the XML API, map App-IDs to AI tools and build an evidence pack.

NGFWApp-ID
Read guide
Fortinet

Fortinet FortiGate Shadow AI Detection

Forward FortiGate web-filter and application-control logs to syslog or FortiAnalyzer, then scan for AI tool domains.

NGFWFortiOS
Read guide
SonicWall

SonicWall Shadow AI Detection

Export SonicWall web activity and application flow logs to detect AI tool traffic across your firewall perimeter.

NGFWSonicOS
Read guide

Proxy Servers

Forward-proxy servers that log every HTTP request and give you full URL-level visibility into AI tool usage.

Squid

Squid Proxy Shadow AI Detection

Parse Squid access logs, extract AI tool domains from CONNECT and GET entries, and produce a usage report without commercial tooling.

ProxyOpen Source
Read guide

Have Your Logs Ready?

Upload a DNS, proxy or firewall export and get a full shadow AI inventory in minutes. No agents, no integration, no ongoing contract.

Start Your Free Audit
View pricing →