What a read-only scan for shadow AI agents found on a live ServiceNow instance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
an hour ago
Built a read-only scanner for shadow AI on ServiceNow, agents, tools, and credentials that are running but were never inventoried anywhere.
One scan turned up seven agents and eleven credentials, twenty nine findings ranked by severity and confidence. A generative AI service credential had no resolvable owner. Seven of the agents were never registered as agents anywhere the platform would list them, they were scripts and flows quietly calling out to a model.
Detection is rule based, not model judged, so the same instance produces the same findings every run, and every finding is tagged confirmed or needs review rather than a flat yes or no. Verified against three live instances. The writeup documents the bugs I hit building it, including a field mapping defect that meant my highest confidence detection tier hadn't actually worked for most of the build.
Full writeup: https://www.linkedin.com/pulse/you-cant-govern-ai-your-instance-dont-know-its-alex-mcdonald-mllve
Repo, open source: github.com/BrianMcD47/AgentCensus
Curious if this matches what others are finding when they actually go looking.
