Quick Buzz Feed

LastPass warns employees before they share sensitive data with AI tools

Gary Lloyd | Sep 29,26 | 01:35 EST

Technology

LastPass has significantly enhanced its Business Max offering by introducing AI Monitoring & Protect and Web Monitoring & Protect. These new capabilities provide crucial visibility and robust governance over the AI tools, SaaS applications, and websites employees utilize, all managed through its established browser-native extension. The update addresses the pressing security challenges arising from widespread, yet often unmonitored, AI usage within organizations, enabling administrators to proactively manage risks, block malicious sites, and caution users against sharing sensitive corporate data with AI platforms. This expansion aims to balance the efficiency benefits of AI with necessary security protocols, ensuring businesses can leverage advanced tools without compromising data integrity or security posture.

LastPass AI Monitoring & Protect: Shadow AI tool discovery and AI usage guidance The introduction of AI Monitoring & Protect by LastPass is a direct response to the prevalent 'Shadow AI' phenomenon, where employees widely adopt AI tools without official IT oversight. A staggering 92% of organizations acknowledge AI usage, yet nearly two-thirds report either significant ungoverned AI activity or a complete lack of visibility into it, creating considerable security vulnerabilities. AI Monitoring acts as the foundational layer by enabling administrators to discover which AI tools employees are actually using within their browsers. This crucial insight allows IT teams to understand the real-world AI ecosystem, identify potential risk areas, and prioritize their governance efforts effectively. Following discovery, AI Protect translates this knowledge into actionable security measures. A primary concern for 68% of organizations is employees inadvertently or intentionally inputting sensitive data—such as credentials, API keys, or personal identifiable information—into AI tools. AI Protect specifically addresses this by logging all detected attempts to share sensitive data with AI applications for administrator review. More importantly, it provides real-time warnings to employees *before* they complete the action, acting as a critical preventative layer against accidental data exposure. This feature allows organizations to embrace the productivity gains offered by AI while maintaining strict control over sensitive information, reducing the friction typically associated with implementing new security policies around rapidly evolving technologies. LastPass Web Monitoring & Protect: Website discovery, malicious site blocking, and website rules by category Beyond AI, LastPass's Business Max now includes Web Monitoring & Protect, designed to secure employees' broader web interactions. In today's dynamic online environment, employees frequently visit numerous websites, increasing their exposure to various web-based threats like malware, phishing attempts, and infostealer software. Recognizing this, Web Monitoring offers administrators enhanced visibility into employees' web browsing activities, helping them pinpoint where risks may arise and when sites were last accessed. This comprehensive insight is vital for formulating robust web access policies. Subsequently, Web Protect provides a streamlined and scalable mechanism to enforce these policies, safeguarding employees from high-risk online environments. Key capabilities include: **Website discovery**, offering continuous visibility into all websites employees access to assess potential exposure points; **Malicious site blocking**, which introduces a new category specifically for blocking phishing, malware, and other highly dangerous sites across the entire organization through a single, easily manageable rule. This significantly reduces the attack surface from known web-based threats without requiring administrators to manually manage individual blacklists. Furthermore, **Web rules by category** empowers administrators to apply 'Block,' 'Warn,' or 'Allow' policies to over 25 predefined site categories simultaneously. This feature leverages AI-powered domain classification to ensure continuous coverage for new and evolving websites, though any specific app-level rules set by administrators will always take precedence, offering granular control. These combined features provide a layered defense, ensuring a safer browsing experience for employees while maintaining organizational compliance and security standards.

LastPass AI Monitoring & Protect: Shadow AI tool discovery and AI usage guidance

The introduction of AI Monitoring & Protect by LastPass is a direct response to the prevalent 'Shadow AI' phenomenon, where employees widely adopt AI tools without official IT oversight. A staggering 92% of organizations acknowledge AI usage, yet nearly two-thirds report either significant ungoverned AI activity or a complete lack of visibility into it, creating considerable security vulnerabilities. AI Monitoring acts as the foundational layer by enabling administrators to discover which AI tools employees are actually using within their browsers. This crucial insight allows IT teams to understand the real-world AI ecosystem, identify potential risk areas, and prioritize their governance efforts effectively. Following discovery, AI Protect translates this knowledge into actionable security measures. A primary concern for 68% of organizations is employees inadvertently or intentionally inputting sensitive data—such as credentials, API keys, or personal identifiable information—into AI tools. AI Protect specifically addresses this by logging all detected attempts to share sensitive data with AI applications for administrator review. More importantly, it provides real-time warnings to employees *before* they complete the action, acting as a critical preventative layer against accidental data exposure. This feature allows organizations to embrace the productivity gains offered by AI while maintaining strict control over sensitive information, reducing the friction typically associated with implementing new security policies around rapidly evolving technologies.

LastPass Web Monitoring & Protect: Website discovery, malicious site blocking, and website rules by category

Beyond AI, LastPass's Business Max now includes Web Monitoring & Protect, designed to secure employees' broader web interactions. In today's dynamic online environment, employees frequently visit numerous websites, increasing their exposure to various web-based threats like malware, phishing attempts, and infostealer software. Recognizing this, Web Monitoring offers administrators enhanced visibility into employees' web browsing activities, helping them pinpoint where risks may arise and when sites were last accessed. This comprehensive insight is vital for formulating robust web access policies. Subsequently, Web Protect provides a streamlined and scalable mechanism to enforce these policies, safeguarding employees from high-risk online environments. Key capabilities include: **Website discovery**, offering continuous visibility into all websites employees access to assess potential exposure points; **Malicious site blocking**, which introduces a new category specifically for blocking phishing, malware, and other highly dangerous sites across the entire organization through a single, easily manageable rule. This significantly reduces the attack surface from known web-based threats without requiring administrators to manually manage individual blacklists. Furthermore, **Web rules by category** empowers administrators to apply 'Block,' 'Warn,' or 'Allow' policies to over 25 predefined site categories simultaneously. This feature leverages AI-powered domain classification to ensure continuous coverage for new and evolving websites, though any specific app-level rules set by administrators will always take precedence, offering granular control. These combined features provide a layered defense, ensuring a safer browsing experience for employees while maintaining organizational compliance and security standards.