KnowBe4 has expanded its Agent Risk Manager platform with a new browser extension for Chrome and Edge that gives security teams greater visibility and control over employee use of unsanctioned AI services.
The new capability addresses the growing challenge of shadow AI, as employees increasingly turn to chatbots, coding assistants, meeting transcription services and browser-based AI agents without formal approval from IT or security teams.
The extension actively identifies known and previously unknown AI-related domains and allows administrators to allow, warn or block access in real time. This gives organisations a mechanism to respond to unauthorised AI usage at the point of access rather than relying solely on reports generated after the activity has occurred.
According to KnowBe4’s From Agentic Risk to Human Wins report, 52% of organisations surveyed said their use of AI was unapproved or ungoverned. More than a third of employees surveyed also said they commonly source their own agentic AI tools when approved options are unavailable or restrictive.
“Visibility alone does not stop a data leak, it just documents it,” said Matt Duren, SVP of AI and Data, KnowBe4. “Security teams have been instructed to take an inventory of the AI tools running in their environment. While that is necessary, it is not enough. With this extension, the same capability that discovers shadow AI can now act on it in real time.”
The browser extension forms part of the wider KnowBe4 Platform rather than operating as a separate security console. The company said activity identified through Agent Risk Manager can be incorporated into the same risk profile used for phishing simulations, security awareness training and real-time coaching.
KnowBe4 said this approach provides organisations with a broader view of human and AI-related risk and lays the foundation for a unified Risk Score.
The development comes as enterprises face the challenge of balancing AI adoption with security and governance requirements. Blocking access to AI services entirely can limit productivity, while allowing employees to use unapproved tools can introduce risks around sensitive data, compliance and security.
The shadow AI browser extension is currently available through Agent Risk Manager Early Access to Security Awareness Training Advanced customers on direct-sale, U.S.-tenant accounts. Broader availability is expected in the coming months.
KnowBe4 has more than 70,000 customers globally and said Agent Risk Manager builds on 16 years of behavioural risk data gathered across its customer base.
