iboss launches free AI discovery service for firms

iboss has launched an AI Security Platform, including a free discovery service that helps organisations identify AI tools in use across their operations.

The launch comes as companies face growing concern over employees' unapproved use of consumer and workplace AI services, as well as software agents making outbound connections that security teams may not be tracking.

The platform is designed to show security teams which AI tools are being used, who is using them, and the level of risk attached to each service. It can track prompts, sessions, and users across services including ChatGPT, Microsoft Copilot, Gemini, Claude, and Perplexity, as well as desktop applications such as Cursor.

The free tier focuses on discovery and visibility, while paid versions add policy controls intended to restrict how staff interact with AI services and how AI agents connect to external domains.

That approach reflects a broader shift in corporate security, as businesses try to map AI adoption before deciding which tools to approve, limit, or block. Security leaders have increasingly warned that staff may paste sensitive customer information, source code, or internal messages into personal AI accounts outside approved company systems.

The platform can automatically inventory AI tools when they appear on an endpoint and assign risk classifications to them. Usage data can also be tied to individual users, with prompt and response histories searchable by user, vendor, message, or date.

Free discovery

iboss is positioning the free service as an entry point for organisations that want a faster way to assess their AI exposure without going through a procurement process. Deployment can be completed in an afternoon, with a full AI footprint visible within hours.

Paid tiers add controls such as allow, block, or redirect rules by AI category, service-specific exceptions, tenant restrictions to keep staff within company-managed AI accounts, and controls over copy, paste, upload, and download actions. The system also includes default-deny connection policies for AI agents running on endpoints and servers, with domain allow and block lists.

The model allows small organisations and individual users to start with the free version, while larger companies can distribute pre-configured installers across Windows and macOS fleets through mobile device management systems, without enrolling each device individually.

Regulated sectors

iboss has long targeted security-sensitive customers, including government and regulated industries, and is using that positioning in the AI market. The platform supports healthcare, finance, and government requirements through features such as audit trails, session history, and data-handling controls.

Highlighted use cases include identifying shadow AI, managing AI-related spending, preventing data leaks, and securing AI agents. The service is also intended to help organisations prepare for audits by keeping records of prompts and responses.

Paul Martini, Chief Executive Officer of iboss, framed the launch around the visibility problem many organisations face as AI use spreads across business functions.

"Every organization is asking the same first question about AI: what is actually running here? That answer should not require a procurement cycle or a six-figure contract. We made discovery free for everyone because visibility is the foundation of AI security, and we built it on the same engine that secures the most demanding government and financial environments in the world. Free does not mean lightweight. It means there is no longer any excuse to be blind," Martini said.

Many security vendors are now trying to establish themselves in AI governance as companies move from informal experimentation to formal policy-setting. That has created a market for software that can discover AI usage, enforce approved account access, and monitor whether sensitive information is being shared through third-party tools.

The platform is intended to cover both browser-based AI services and agent-based software running on devices and servers. This matters because companies are increasingly concerned not only about employees using public chatbots, but also about autonomous tools initiating their own communications with outside services.

iboss also stressed the balance between ease of adoption and audit requirements, particularly for organisations operating in heavily regulated markets.

"Organisations should not have to choose between a tool that is easy to adopt and one that can stand up to an audit. The AI Security Platform is both. It is free to start, running within hours, and built to the standard that banks, hospitals, and government agencies require. Our goal is simple: when anyone, anywhere, asks how to see and control AI, this is the answer," Martini said.