KnowBe4 Shuts Down Shadow AI with Agent Security Innovation

New Agent Risk Manager browser extension performs active discovery of new and unknown domains allowing security admins to block, warn or allow the sites

TAMPA BAY, Fla.--(BUSINESS WIRE)--KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced a significant expansion of Agent Risk Manager, with the launch of a new native browser extension for Chrome and Edge that gives security teams real-time control over shadow AI. This new capability moves beyond existing dashboards that flag unsanctioned AI use after the damage is done, to a control point that can allow, warn or block employee access to known AI sites the moment it happens.

With unsanctioned chatbots, coding assistants, meeting transcribers and browser-based AI agents, employees are adopting shadow AI without IT’s knowledge. Shadow AI has emerged as one of the most difficult risks for security teams to contain. According to the recent KnowBe4 "From Agentic Risk to Human Wins" report, 52% of organizations report their use of AI is unapproved or ungoverned. The same report also found over a third of employees reported that they commonly source their own agentic AI tools where options are unavailable or restrictive, leaving organizations vulnerable to cyberattacks.

“Visibility alone does not stop a data leak, it just documents it,” said Matt Duren, SVP of AI and data, KnowBe4. “Security teams have been instructed to take an inventory of the AI tools running in their environment. While that is necessary, it is not enough. With this extension, the same capability that discovers shadow AI can now act on it in real time without forcing security teams to choose between locking AI down and letting it run unchecked.”

Where many shadow AI and browser-security offerings operate as standalone extensions or network layer add-ons, Agent Risk Manager sits inside the broader KnowBe4 Platform, which draws on 16 years of behavioral risk data across more than 70,000 customers. That means shadow AI activity captured at the browser does not sit in an isolated console, it feeds the same risk profile as an organization's phishing simulations, security awareness training, and real-time coaching, and lays the groundwork for a unified Risk Score.

The shadow AI browser extension is available now to Security Awareness Training Advanced customers on direct-sale, U.S.-tenant accounts as part of Agent Risk Manager Early Access. Broader availability is planned in the coming months. Customers can learn more or self-onboard at www.knowbe4.com/products/ai-agent-risk-manager.

About KnowBe4

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, email & collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 16 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense. More info at knowbe4.com.

Follow KnowBe4 on LinkedIn and Instagram.

FAQs

Q: What does the shadow AI discovery capability do?

• Quantifies real usage: For every tool it finds, it shows when it was first seen, how many distinct users have touched it, and how many usage events occurred, so security teams can prioritize based on actual exposure.
• Enables one-click governance: Directly from the discovery row, security teams can hit "Add Rule" to turn a discovered tool into a governed one (approved, warn, or blocked), or "Dismiss" it out of the queue without exporting data, using a separate tool, or submitting an engineering ticket.

Q: What are the benefits of the shadow AI discovery capability?

AI discovery and governance are one system, not two products stapled together. The new capability provides an actual control rather than just a report, allowing security teams to act on information instantaneously. Security teams can block, warn or allow new AI sites/tools.

Q: What is the KnowBe4 Risk Score?

The proprietary KnowBe4 Risk Score is supported by more than 16 years of threat intelligence and user behavior data. KnowBe4’s SmartRisk Engine analyzes 316 indicators such as employees’ Phish-prone™ Percentage, how well they identify deepfakes and how employees interact with AI to create the most accurate Risk Score in the industry.

Q: What is KnowBe4 and who is it for?

KnowBe4 is a cybersecurity company focused on securing the digital workforce, securing both humans and AI agents through a single platform spanning attack simulation and training, email & collaboration security, and agent security, all powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score built from 316 unique indicators. Founded in 2010, KnowBe4 has been delivering AI-powered security since 2016, backed by 50+ patents, 70+ deep integrations, and 16+ years of behavioral data, and is trusted by more than 70,000 organizations worldwide, having trained over 100 million people, which includes 1 in 3 full-time workers in the U.S. The company is for CISOs and Compliance leaders who need visibility, automation, and metrics that speak to the board, SOC teams needing automation that cuts through alert noise, and security awareness admins who need to measure and change behavior.