Shadow AI is the unsanctioned SaaS model, the intern’s agent, the public repo with a production key. OptimaTrust discovery fingerprints URLs, APIs, and harvests. Candidates are not production assets. Operators register, mark unmanaged, or decommission. Continuous cloud-account hunts are a roadmap honesty item — the product does not pretend it already scans every subscription.
What you get
- Shadow state machine with verification
- Hashed discovery evidence
- Register only what you are willing to own