A user opens a browser tab, pastes data into a chat assistant, and nothing is installed.
A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list.
Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data outside.
None of this reaches your software inventory. Tasked with controlling AI, an administrator often resorts to blocking well-known AI websites and taking enforcement action without knowing what is actually running.
Bitdefender GravityZone AI Visibility and Control (AIVC) is the discovery and risk layer that answers the questions you have, first: Which AI software is present on your protected Windows endpoints, who is running it, and how much risk does each one carry.
AI Visibility and Control covers four classes of exposure, and each one sits outside a control you already own.
GravityZone AI Visibility and Control discovery takes place during the risk scan. The GravityZone BEST agent collects metadata from each endpoint and keeps that collection minimized: it records what AI software is present and how it is configured, not what anyone does with it. AIVC does not inspect prompts, chat history, model weights, credentials, or full file content.
AI Visibility and Control recognizes more than 50 AI agents and more than 70,000 skills, the modular code packages that extend an agent's capabilities and that arrive from public registries. Because agents exercise permissions through these skills, considering only agents while ignoring skills would account for only a fraction of the total exposure.
Source link


![[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls](https://images.themorningpulse.fyi/uploads/2026/10/rss-mv6s36di-no590f-media.jpg)




