{"id":8714,"date":"2026-06-03T12:29:24","date_gmt":"2026-06-03T17:29:24","guid":{"rendered":"https:\/\/www.dnsfilter.com\/blog\/the-ai-tools-your-dns-cant-see"},"modified":"2026-06-03T12:29:24","modified_gmt":"2026-06-03T17:29:24","slug":"the-ai-tools-your-dns-cant-see","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/06\/03\/the-ai-tools-your-dns-cant-see\/","title":{"rendered":"The AI Tools Your DNS Can’t See"},"content":{"rendered":"

CyberSight<\/span><\/u><\/a>‘s new AI Usage Report sees what DNS misses: Locally installed AI clients, locally-hosted models, and the active time employees spend in each.<\/span><\/p>\n

Shadow AI and the AI visibility gap<\/h2>\n

Ask most IT and security leaders which AI tools their employees use, and the honest answer is some version of “ChatGPT, and probably others.” The “probably others” is the problem, and it’s bigger than most teams realize.<\/span><\/p>\n

The “AI visibility” tools on the market today are mostly DNS-based. They count queries to known AI domains and call that a report. That works fine for the AI tools that look like websites. It misses everything else: Locally installed AI applications running directly on the laptop, downloadable LLM clients, IDE plugins that run inference on-device, desktop AI assistants. These tools generate little to no recognizable DNS traffic. To a DNS-based visibility tool, they don’t exist.<\/span><\/p>\n

That gap matters because the local-AI category is growing fast. The same employees who installed unsanctioned SaaS a decade ago are now running models on their own machines, downloading clients, and stitching together workflows that bypass the network (and your security protocols) entirely.<\/span><\/p>\n

And even the network-visible portion is climbing. Gen AI traffic on the DNSFilter network grew more than 6x in the past year, a 561% increase from roughly 432 million requests in April 2025 to over 2.86 billion in April 2026. That’s only what we can see at the DNS layer. The full picture is larger.<\/span><\/p>\n

Most organizations don’t have a tool for any of this. The dedicated AI governance vendors that do exist are priced for the Fortune 500 and require a separate agent on every endpoint. Everyone else has been left to guess.<\/span><\/p>\n

What’s new in CyberSight<\/h2>\n

The new AI Usage Report inside CyberSight gives admins a purpose-built view of employee AI tool activity, built from telemetry the Roaming Client and browser extension already collect. No new agent. No new deployment. No new data collection.<\/span><\/p>\n

<\/span><\/span><\/p>\n

When you open the report, you’ll see:<\/span><\/p>\n