JFrog has introduced "Shadow AI Detection" to its Software Supply Chain Platform, a new feature designed to help enterprises manage the growing risks associated with informally adopted AI integrations. This capability automatically scans and inventories all internal AI models and external AI API gateways, including unsanctioned tools from providers like OpenAI and Anthropic. By providing this comprehensive visibility, organizations can establish centralized governance to enforce security and compliance policies, control access, track usage, and maintain a full audit trail. JFrog emphasizes that unmanaged "shadow AI" poses significant security, regulatory, data-leak, and supply-chain vulnerabilities, necessitating governance mechanisms akin to those used for software dependencies. The feature positions JFrog's platform as a unified system of record for both software and AI supply chains, aiding compliance with evolving regulations like the EU AI Act. The article also highlights similar AI governance solutions from competitors such as ModelOp Center and Aurva, indicating a broader industry trend towards securing the AI supply chain. General availability for Shadow AI Detection is expected in 2025 as part of the existing JFrog AI Catalog.


