Finds shadow AI and personal accounts
Discovery starts from traffic and identity, not from a procurement export, so it surfaces the AI applications, personal accounts and unreviewed agents nobody asked permission to use.
Discover
See every AI in use, shadow AI and personal accounts included.
Qastel finds the AI tools, agents and model endpoints your teams actually use, from the systems you already run, and keeps them in one live inventory.
Most of your AI never went through security. Qastel finds it anyway.
A free tier, a work email and a browser tab are all it takes to start using an AI tool. Qastel spots it from the signals your estate already produces, so you can govern it like the rest.
Finds what nobody declared
Sign-ins, network logs, agent platforms and AI gateways reveal the tools no survey or procurement list contains.
Sees what the network cannot
On company devices, the browser extension and the desktop agent catch personal accounts and AI desktop apps.
Shows who is behind it
One identity per person, with every account they use, including personal accounts on shadow AI.
Shadow AI discovery
Find the shadow AI nobody asked permission to use.
Every new AI system starts as shadow AI until someone reviews it. Qastel names the tool, rates its risk and shows who uses it, so you can decide what to do with it.
- Assistants, AI features inside SaaS, coding tools, agents and model APIs
- Personal accounts detected inside the browser session, where a proxy sees only encrypted traffic
- Access granted to an AI app but never used, flagged so you can revoke it
People and usage
See who uses shadow AI, down to the personal account.
The People directory resolves everyone seen using AI to one identity and links the accounts they use: the work account in your directory, and the personal one they opened a chatbot with.
- A personal account, or a personal plan on a work email, flagged on each person
- The AI systems each person used in the last 30 days, with a filter by team
- Internal, guest and not-in-directory accounts told apart
Inventory
Beyond chatbots: agents, desktop apps and model APIs.
Shadow AI is more than a chatbot in a browser tab. The inventory lists the agents your teams built, the AI apps installed on their machines and the model APIs their code calls, each with its risk and its users.
- Agents built on agent platforms listed under the platform they run on
- AI desktop apps found on Windows by the desktop agent, from coding assistants to local model runners
- Read-only connections: nothing is rerouted through Qastel to discover AI
The Qastel difference
What you get that you do not get elsewhere.
Reports on your AI estate, on demand
On top of the live inventory, generate a report or export the inventory at any time, so the picture you share is always the current one.
Alerts you, and your Guardians follow up
New AI systems, personal accounts in use and sensitive data in prompts land in your Inbox as they are found. A Guardian can review that activity and propose what to do next.
Frequently asked questions
Do we need to install an agent on every endpoint?
No. Qastel reads from systems you already operate: your identity provider, your network and web-security tooling, the agent platforms your teams build on, your AI providers' admin data and your AI gateway. The optional client-side components are a browser extension for managed browsers and a Windows desktop agent, deployed by policy when you want visibility inside the session or the device.
How is this different from a CASB or a SaaS management tool?
Those products inventory applications. Qastel inventories AI systems: the models, agents, copilots and endpoints behind those applications, together with the identities that reach them, the data sensitivity involved and their EU AI Act risk classification. A CASB is a useful signal source, and Qastel treats it as one input among several.
Can Qastel find AI used through personal accounts?
Yes. On managed browsers the Qastel extension sees which account is signed in to an AI tool, and flags a personal account, or a personal plan used with a work email. The Usage page charts work and personal use week by week, and Control policies can be scoped to personal accounts.
Where does discovery data live?
In the EU. Qastel is built and hosted in Europe, and customer data is stored and processed in Paris. The full subprocessor list and our DPA are published in the Trust Center.
See Discover in action.
Get a 30-minute overview of how Qastel discovers, assesses and controls the AI used across a business.