Unmanaged Agent Details

Open Registry > Unmanaged Agents to view AI agent activity identified through supported unmanaged-agent discovery mechanisms.

The page provides an enterprise-level view of detected unmanaged agents and their distribution across AI platforms.

Agents Overview

The Agents Overview summarizes the unmanaged agent population observed across the environment.

Information What it tells you
Unmanaged Agents Number of agents currently identified as unmanaged.
Unique Agent Platforms Number of distinct AI platforms represented by the detected agents.
Agents by Platform Distribution of unmanaged agents across detected platforms.
Use this view to understand the overall presence of unmanaged AI activity and identify platforms that may require further investigation.

Agent Registry

The Agent Registry lists the individual unmanaged agents identified from endpoint activity and provides the context available for each detection.

Depending on the available detection information, the registry can show details such as:

Field Description
Platform AI platform associated with the detected activity.
OS User Endpoint user associated with the detection.
Hostname Endpoint on which the activity was detected.
Risk Current risk level associated with the unmanaged agent.
Status Indicates that the agent is currently unmanaged.
Detections Number of detections associated with the agent.
First Seen When the agent was first detected.
Last Seen Most recent detection.
Sanctioned Indicates whether the organization has sanctioned the detected agent.
Use the registry to move from the enterprise-level view into individual unmanaged agents that require review.

Detection Logs

Select Detection Logs to investigate the activity that contributed to unmanaged-agent discovery.

Detection information provides additional context for understanding why the activity was identified and helps security teams distinguish expected enterprise AI usage from activity that requires further investigation.

The information available can vary depending on the discovery mechanism and the context captured for the detection.

Investigating an Unmanaged Agent

When an unmanaged agent is detected, use the available information to understand the activity before deciding how it should be handled.Identify the agent > Review the user and endpoint > Examine detection activity > Assess risk and context > Determine whether the agent is expected > Sanction or continue investigation

This approach allows organizations to use unmanaged-agent discovery as a visibility and investigation capability rather than assuming that every detected Shadow AI agent represents a security violation.