Sophos unveils tool to detect unauthorised AI use

Sophos unveils tool to detect unauthorised AI use

Cybersecurity company Sophos has launched a security product designed to detect unauthorised artificial intelligence (AI) tools used by employees and applications and monitor their activity in real time.

Called Sophos AI Defense, the product is now generally available and aims to help organisations identify shadow AI — AI tools and agents used without approval from their IT or security teams — and reduce the risk of sensitive data exposure.

According to a press release, the product is delivered through Sophos Fusion, the company's cybersecurity defence system, and is designed to allow organisations to monitor AI activity without introducing a separate, disconnected security tool.

The company said its product collects signals from devices, networks, identity systems and browsers to map AI activity across an organisation. It assesses who or what is acting, how the activity is behaving and what data is involved to distinguish routine use from activity that may require intervention.