0. From Getting Started to Shadow IT Detection

This service detects situations where employees are using SaaS services without the company’s knowledge — known as shadow IT.

Shadow IT

Shadow IT broadly includes employees using services like LINE or Messenger with customers, but in the context of our service description, shadow IT refers to services that are not officially approved as company tools. Detecting and properly managing shadow IT — services that the company does not track or control — is key to strengthening security and maintaining compliance.

Benefits of detecting shadow IT

Detecting and visualizing shadow IT provides three key benefits.

Benefit	Key effect
Reduced security risk	Identify and address risks of data leaks or malware infections caused by unauthorized services at an early stage.
Compliance adherence	Prevent violations of regulations (such as the Act on the Protection of Personal Information) and internal policies, and handle audits smoothly.
IT asset visibility and optimization	Gain a complete picture of IT assets, leading to cost reduction and the provision of appropriate alternative solutions.

Flow from shadow IT setup to detection

This service detects service usage through browser extension distribution and login history.

Service (shadow IT) detection Detect services (shadow IT) How shadow IT detection works using Google Workspace (reference article)
Browser extension distribution Distribute the browser extension to detect shadow IT and collect service activity
1. How to distribute the browser extension Windows standalone setup Windows GPO Windows Intune Distribute and configure Chrome extensions on Mac using configuration profiles and MDM Distribute Chrome extensions using the Google Workspace Admin Console
Data collection and review Check service usage in the event log
Shadow IT management and operations How to use the shadow IT management ledger

Main shadow IT detection methods

This service collects logs from multiple data sources to accurately track shadow IT usage.

Detection method	Details
Google login (Google Auth)	Via OAuth integration with Google Workspace, usage logs (access logs) are retrieved for SaaS services that employees log into using their Google account.
Microsoft 365 (Microsoft Auth)	Using Microsoft 365 credentials (OAuth), usage logs are retrieved for SaaS services that employees log into with their Microsoft account.
Microsoft Entra ID (Microsoft Auth)	Via integration with Microsoft Entra ID (formerly Azure AD), sign-in logs and usage data are retrieved.
Extension (browser extension)	By distributing a browser extension, the URLs and activity of SaaS services used by employees are detected and recorded in detail.

Introduction

Guides by Feature

0. From Getting Started to Shadow IT Detection

Shadow IT

Benefits of detecting shadow IT

Flow from shadow IT setup to detection

Main shadow IT detection methods

​Shadow IT

​Benefits of detecting shadow IT

​Flow from shadow IT setup to detection

​Main shadow IT detection methods

Shadow IT

Benefits of detecting shadow IT

Flow from shadow IT setup to detection

Main shadow IT detection methods