TL;DR: Twingate DNS Filtering customers can now use the AI Usage Overview at no extra charge to see which AI tools their teams access and how that usage is trending.

As AI usage spreads beyond technical teams across entire organizations, IT and security leaders are hearing the same question: what AI tools are people actually using?

We're introducing the Twingate AI Usage Overview, a new view inside Secure DNS analytics in the Twingate Admin Console. It shows which AI tools people accessed on devices covered by DNS Filtering, whether through a browser or a desktop app.

If you already use Twingate DNS Filtering, the client handles your devices' domain lookups, including those for AI services. The overview matches those lookups against a curated list of AI services and their domains, then groups the requests by service.

To see your activity, open Secure DNS and select AI Usage Overview.

See which AI services showed up

If you work in IT or security, you've probably been asked which AI tools people at your company are accessing.

Leadership or Finance may want an inventory. An auditor or customer may ask how you're managing the risk. You know there's AI activity, but you may not have evidence of which services are involved.

AI tools carry a distinct data risk: employees can enter sensitive company information directly into prompts. What happens to that data depends on the provider, plan, and settings. Some services may use prompts to improve or train their models.

IT and security teams need to know which services employees are actually using before they can assess those practices or decide which tools to allow. And because employees can access browser-based AI tools without going through procurement or asking IT to install anything, those tools may not appear in approved-software inventories.

The AI Usage Overview brings the AI tools people accessed into one list. It covers general-purpose assistants such as ChatGPT and Claude, along with AI-native tools such as Cursor, Granola, and others. You can discover an unfamiliar service or check for activity associated with one you already suspected was present.

Review the list for the selected time window and expand a service to see the domains that matched. If an unfamiliar name needs investigation, export the device-level activity as a CSV to help you follow up with the relevant teams.

Explore your AI activity

Choose a time window and profile to start with activity across the AI services in the overview:

• AI Usage by Date shows daily activity across services. Look for increases or decreases over time.

• AI Exposure shows AI requests as a share of all DNS requests, or the share of covered devices that made requests to AI services, depending on your selected view.

Then look at individual services in the Top AI Services list:

• Switch between Devices and Queries to rank services by the number of devices that made requests or the volume of DNS requests. One device can generate many requests.

• Days Active shows the number of days people accessed a service. Use it to distinguish a single day's activity from a recurring pattern.

• Expand a service's row to see the domains that matched and the request count for each.

Note: DNS requests can include background activity, and they don't reveal prompt content or whether someone signed in with a work or personal account.

Take a look at your overview

The AI Usage Overview is available to all Twingate DNS Filtering customers at no extra charge.

To get started, open Secure DNS and select AI Usage Overview. Start with the service list: which names do you recognize, and which deserve a closer look?

Not currently a DNS filtering customer? Reach out to your account representative, and we can help you get started.