Skip to content

Viewing the Extensions Inventory

The Extensions Inventory provides centralized visibility into all browser extensions related to Generative AI that are installed across the organization. The inventory focuses exclusively on AI-related extensions including:

  • GenAI productivity tools - Generative AI assistants and copilots.
  • Prompt assistants - Prompt engineering and productivity tools.
  • AI integrations - Browser-based integrations with AI platforms.
  • Agentic AI extensions - AI agents that operate directly within the browser environment.

The inventory aggregates extensions discovered across supported browsers, regardless of how they were installed. This includes extensions deployed through enterprise management channels as well as those introduced by users or third-party software.

For each discovered extension, the inventory displays details including:

  • Extension - The extension name.
  • Browser - The browser in which the extension was discovered.
  • User - Number of users within the organization with the extension installed.
  • Deployment Type - The type of deployment based upon how the extension was installed.
  • Permissions - The permissions requested by the extension.
  • Risk Level - Calculated risk level based on permission sensitivity.

When a user uninstalls an extension, the change is reflected in the inventory within 24 hours. If the last remaining user uninstalls a given extension, it will be removed from the inventory. This ensures the inventory reflects both installation and removal activity.

To view the Extensions Inventory:

  1. Go to Inventory > Extensions.

  2. Select > View users to view the users with the extension installed.

Use quick filters to refine applications listed in the table by browser, deployment type, and risk level. Additional filtering can be applied by selecting More filters.

Deployment Types

Shadow AI Remediation classifies extensions based on how they were installed:

  • Admin - Installed through enterprise device management (MDM).
  • Store - Installed directly by an employee from a browser extension marketplace. These installations may introduce higher risk due to the potential use of unsanctioned tools.
  • Third-party - Installed as a side effect of other software deployed on the device, for example enterprise software packages that bundle extensions.
  • Dev Mode - Manually installed by a user after enabling browser Developer Mode, typically bypassing standard controls.

Categorization helps admins manage security by identifying which extensions are enterprise-approved and which may pose a threat.

Permissions and Risk Evaluation

By default, the Extensions Inventory is sorted by overall risk level for each extension. Each extension declares its permissions. Shadow AI Remediation analyzes these permissions and assigns a sensitivity level of Low, Medium, or High.

The overall risk level of the extension is calculated from the combination and sensitivity of its requested permissions. Particular attention is given to sensitive permissions, such as access to cookies or browsing data, which may expose organizational or user information.

Building a Basic Application Search Query

Basic search queries can be created by searching for an application name and selecting the filter dropdowns to refine your search criteria.

To build a basic search query:

  1. Go to Inventory > Extensions from the left panel.

  2. (Optional) Enter an application name in the search and select Enter.

  3. Select the filter dropdowns to refine your search.

    • Browser - Select the desired browser.
    • Deployment type - Select the desired deployment type.
    • Risk level - Select the desired risk level.

  4. Select More Filters to further filter based upon permissions.

The search results are displayed based upon your selected search query. To save your query, select the Database icon  next to the search box, and select Save as new query.

Building Advanced Application Search Queries

Custom search queries can be created using the search box. Search queries for specific use cases can be built using predefined search query syntax's and combined with AND, OR, NOT, AND NOT, and TO operators.

To build an advanced search query:

  1. Go to Inventory > Extensions from the left panel.

  2. Enter the required syntax into the search box.

  3. Select the Database icon  next to the search box, and select Save as new query.