AI tools
View, classify, and manage all AI tools detected in your network traffic.
Overview
The AI tools page lists every AI tool found in the proxy and firewall logs your organization sends to VerifyWise. A tool appears here the first time a log line matches a known AI tool. From here you can review each tool's risk score, set its status, add it to the model inventory or promote it to an AI app.
Tool list
The main table shows all detected tools with the following columns:
- Tool: Name and vendor icon of the detected AI application
- Status: Current status assigned to the tool (see below)
- Users: Number of unique users who have accessed this tool
- Events: Total network events recorded for this tool
- Risk score: Composite score from 0 to 100 (hover for formula details)
- Last seen: Date of the most recent network event for this tool
The list opens with the highest risk scores first; tools that have no score yet come last. Use the status filter to show tools with one status. Clicking a column header sorts the rows on the current page, and your choice is remembered.
Tool statuses
Each tool has one of these statuses. A status records your assessment; VerifyWise does not block or allow traffic itself, so enforce decisions in your proxy or firewall. Two statuses change behavior in VerifyWise: Approved lowers the risk score once the tool is also in the model inventory, and Blocked makes "Blocked tool attempt" rules fire.
Detected
Newly discovered tool, not yet reviewed.
Under review
Currently being evaluated for compliance and risk.
Approved
Reviewed and approved for organizational use.
Restricted
Allowed with conditions, such as specific departments only. The conditions are not enforced by VerifyWise.
- Blocked: Prohibited from use. When your proxy reports a blocked request to this tool, a "Blocked tool attempt" rule can send an alert.
- Dismissed: Reviewed but deemed irrelevant (e.g., false positive).
Tool detail view
Click any tool row to open the detail view, which shows:
- Vendor, total users, total events, risk score, first detected and last seen dates
- A status selector to change the tool's status
- A "Start governance" button, or a "Governed" badge once the tool is in the model inventory
- A "Promote to AI app" button
- Departments that used the tool, with a user count for each
- Top users ranked by event count
Starting governance
If a tool is not yet in the model inventory, a "Start governance" button appears in the detail view. It opens a form with the provider and model name filled in from the tool. Choose a governance owner (required) and, optionally, a version. Submitting creates a model inventory entry with the status Pending, links the tool to it and sets the tool's status to Under review. If you also pick a data sensitivity or write a risk description, a risk named "Use of <tool name>" is added to the new model's risks. Its level follows the data sensitivity (Medium if you only wrote a description), the governance owner owns it, and it is due in 90 days. Tick "Automatically create a lifecycle entry" to also start the model lifecycle checklist for the new entry.
Promoting to an AI app
Click "Promote to AI app" in the detail view to add the tool to the AI apps inventory. The new AI app takes the tool's name, starts as a draft and notes the vendor in its description. Each tool can be promoted once; a second attempt shows an error.
Risk score
The risk score is a composite metric from 0 to 100, recalculated every night. A newly detected tool has no score until the next run. It uses a weighted formula:
| Factor | Weight | Description |
|---|---|---|
| Approval status | 40% | Zero only when the tool is linked to a model inventory entry and its status is Approved; otherwise the maximum. |
| Data & compliance | 25% | Based on training-on-data policy, SOC 2, GDPR, SSO and encryption at rest. |
| Usage volume | 15% | The tool's event count compared with the average across your tools. Higher usage increases the score. |
| Department sensitivity | 20% | The most sensitive department that used the tool in the last 30 days. Finance, Legal and HR (80) are rated highest, then Engineering and Product (50), any other department (30), and Marketing and Sales (20). Names are matched exactly, ignoring case, so "Finance & Accounting" counts as another department. |