Discovery

You cannot control what you cannot see. Sentry reads the systems Infosys already pays for, licences, sign-ins, invoices and MCP servers, and reports every AI it finds. Registered or not.

4 unregistered
Unregistered AI
4
2 touching sensitive data
People on shadow AI
245
active in the last 30 days
Shadow spend / mo
$10,560
$126,720 / yr, unowned
Connectors
4 / 5
1 left to connect

Connectors

No agent has to cooperate. Each connector reads the paper trail an AI inevitably leaves.

  • Microsoft 365Connected

    Reads: Copilot licence assignments, Entra app registrations, OAuth grants

    Last scan
    12 min ago
    Found
    2
    Scanning on a schedule
  • Okta SSOConnected

    Reads: Every app users sign into, and which of them are AI vendors

    Last scan
    12 min ago
    Found
    2
    Scanning on a schedule
  • SaaS spendConnected

    Reads: Card and invoice lines matched against a catalogue of AI vendors

    Last scan
    1 hr ago
    Found
    1
    Scanning on a schedule
  • MCP registryConnected

    Reads: MCP servers answering inside the network, and who calls them

    Last scan
    12 min ago
    Found
    1
    Scanning on a schedule
  • AWS + AzureNot connected

    Reads: Bedrock/AgentCore and Azure AI Foundry agents running in your accounts

    Last scan
    never
    Found

Discovered AI

Every AI found in the estate, with the evidence that found it.

4 unregistered1 registered1 ignored
  • Microsoft 365 Copilot

    MicrosoftUnregisteredSensitive data

    214 assigned licences · 168 active users in the last 30 days

    Found by Microsoft 365Users 168Spend / mo $6,420First seen Feb 2026
    Proposed tierT3 · Admin API

    Aggregate. Microsoft exposes usage and audit through the Graph API, but the agent runs inside their estate. Admin-API depth is the ceiling.

  • Agentforce (Service Cloud)

    SalesforceUnregisteredSensitive data

    Enabled on the Service Cloud org · 4,180 agent conversations last month

    Found by Okta SSOUsers 46Spend / mo $2,900First seen Apr 2026
    Proposed tierT3 · Admin API

    Aggregate. Every turn lands in queryable Data Cloud objects, so transcripts and spans can be pulled. It cannot be routed through the gateway.

  • Cursor

    AnysphereUnregistered

    Team plan on the engineering card · 31 seats · $1,240/mo

    Found by SaaS spendUsers 31Spend / mo $1,240First seen Nov 2025
    Proposed tierT2 · Native telemetry

    High fidelity. Coding agents emit OTel traces and can be pointed at Sentry's collector without changing how engineers work.

  • Jira MCP server

    AtlassianUnregistered

    Answering on the internal network · called by 2 registered agents and 1 unknown client

    Found by MCP registryUsers 0Spend / mo noneFirst seen May 2026
    Proposed tierT1 · Inline

    Full fidelity. MCP traffic can be fronted by the Sentry gateway, which makes every tool call visible and policy-enforceable.

  • ChatGPT Team

    OpenAIRegistered

    Registered via the org usage API after discovery

    Found by SaaS spendUsers 52Spend / mo $1,560First seen Sep 2025Registered as governance
    Proposed tierT3 · Admin API

    Aggregate. Org usage and compliance APIs give cost and audit at the vendor's depth.

  • Notion AI

    NotionIgnored

    Enabled workspace-wide · 88 users signed in via SSO

    Found by Okta SSOUsers 88Spend / mo $780First seen Jan 2026
    Proposed tierT4 · Registered

    Governance only. Notion exports no per-action audit for AI. It can be registered, owned and bounded, but not observed.