Every AI assurance RFP now says “discover shadow AI.” The weak answer is a connector logo wall. The strong answer is a state machine: DISCOVERED, KNOWN, UNKNOWN, SHADOW, UNMANAGED, DECOMMISSIONED — with a human who registers or rejects.
OptimaTrust fingerprints URLs, APIs, public HTTPS repos, and connector harvests. Evidence is hashed. Candidates do not become production assets by themselves.
We do not claim a complete hunt across every cloud account out of the box. That honesty is how you avoid a false sense of coverage. Hybrid collector and connectors extend reach where you allow them.
Start with the endpoints your staff already pasted into Slack. Then widen.