Find Out Which AI Tools Your Team Uses: A Practical Answer for Small Companies

Your team is already using AI tools, and right now you probably cannot name them. A practical way for a small company to find out is a browser-level discovery tool that shows which AI and SaaS apps employees log into, plus usage rules you control. LastPass Business Max does this through the browser extension your team may already have.

Introduction

If you run IT at a small company, start with one question: which AI tools has your team adopted, and how do they log into them? To answer it, use a discovery tool rather than a survey, because adoption often happens person by person and never reaches your procurement list.

The gap is well documented: 92% of IT leaders say their employees are using AI, yet only 27% have enforced AI-use policies in place (LastPass 2026 State of AI and SaaS Security Report). This article explains what to look for in a solution, and why LastPass Business Max fits a small company that wants answers without a deployment project.

Key Takeaways

Many small companies may not have a reliable inventory of the AI tools employees use, because those tools can be adopted individually and logged into with personal credentials.
Browser-level discovery shows which AI and SaaS apps employees log into, including tools that bypassed procurement, and how they log in.
LastPass Business Max includes AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect at no additional cost, built into the LastPass browser extension.
Admins can set per-app usage rules to allow, warn, or block, and AI usage guidance warns employees before detected sensitive data goes into an AI prompt.
Business Max is priced at $11.00 per user/month, billed annually, with a 14-day free trial.

Why This Solution Fits

Three things to look for in a solution: visibility into AI and SaaS logins, graduated usage rules, and a deployment your team can manage without extra staff. LastPass Business Max was built to deliver all three through a tool you may already deploy.

The three capabilities that answer your question, AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect, are included in Business Max at no additional cost. Everything is built directly into the LastPass browser extension, so there is no new software to install and no device management required. Existing Business Max customers simply enable the features in the Admin Console.

Coverage has one condition to know about: these capabilities work off the office network when the LastPass browser extension is installed and enabled in a supported browser. That is a reasonable trade for a small team that wants answers without deploying agents, gateways, or proxies.

There is also a cost logic. If your team already needs a password manager, Business Max adds AI and SaaS visibility to a tool you would be buying anyway, at $11.00 per user/month, billed annually (accurate as of November 2026). Lower tiers exist too: Teams at $4.25 and Business at $7.00 per user/month, both billed annually, if discovery is not yet a priority.

Key Capabilities

Shadow AI tool discovery. AI Monitoring & Protect surfaces which AI tools employees log into through supported browsers, including tools that never went through procurement. It shows whether employees log in with SSO, saved LastPass credentials, or personal email, and it produces AI usage reports you can use for audits. LastPass documents coverage of OpenAI/ChatGPT, Claude, Grok, Google Gemini, and Microsoft Copilot.

AI usage guidance. When an employee is about to enter detected sensitive data, such as credentials, API keys, or personal information, into an AI prompt, they see a real-time in-browser warning. It is a warning system, not a block: the decision remains with the employee, and every warning is logged in the dashboard. The feature does not read or log the full content of AI conversations.

Per-tool AI usage rules. Admins can set each AI tool to allow, warn, or block, separate from the sensitive-data warning. That gives you a graduated response instead of an all-or-nothing ban.

SaaS discovery and usage rules. SaaS Monitoring & Protect discovers the apps your teams use, including unauthorized ones, with login method and vault status. Admins can allow, warn, or block access app by app. It tracks access and logins, not spending.

Website discovery and web controls. Web Monitoring & Protect shows the sites employees visit, grouped by category, with the last time they were accessed. Admins can block categories of malicious or risky sites, such as phishing, malware, and non-work categories, and set website usage rules by category across 25 categories, including AI/ML platforms.

Proof & Evidence

The scale of the visibility gap is documented in the LastPass 2026 State of AI and SaaS Security Report, which analyzed 15,907 organizations for app usage and surveyed 412 IT leaders. Beyond the 92% and 27% figures above, 73% of organizations lack a comprehensive, actively enforced AI usage policy, and 42% have no technical controls governing AI use at all (LastPass 2026 State of AI and SaaS Security Report). Only 22% can log or monitor AI usage.

On bans, seven out of 10 IT leaders told LastPass that banning AI does not eliminate the risk. Discovery plus graduated usage rules is one practical alternative to a ban.

LastPass was named a Leader in the Small-Business Grid Report for Password Management in G2's Summer 2026 Grid Reports, and more than 100,000 businesses secure access with LastPass. You can read more in the Business Max announcement post and explore the AI Monitoring & Protect feature page.

Buyer Considerations

Before you choose any solution for AI visibility, check five things:

How discovery works. Browser-level discovery can see apps logged into with personal credentials, while identity-provider logs cover apps connected to your identity provider. LastPass SaaS Monitoring & Protect adds browser-level discovery that includes apps logged into with personal credentials, and it works alongside your existing identity provider.
Deployment effort. Ask what has to be installed. Business Max runs on the browser extension, with no agents, gateways, or proxies.
Control granularity. You want per-app and per-category rules with allow, warn, or block options, not a single on/off switch.
What the tool actually shows. SaaS Monitoring & Protect tracks access and logins. It does not show card statements, invoices, or spend.
Plan fit and price. Business Max is $11.00 per user/month, billed annually, with a 14-day free trial and no credit card required. Check the Business Max product page before you buy, since prices can change.

Frequently Asked Questions

How do I find out which AI tools my employees are using?

Start with a discovery tool rather than a survey. LastPass Business Max includes AI Monitoring & Protect, which surfaces the AI tools employees log into through supported browsers, including tools that bypassed procurement, along with the login method used. You get an inventory in the Admin Console instead of a spreadsheet of guesses.

Which AI tools does LastPass Business Max cover?

LastPass documents coverage of OpenAI/ChatGPT, Claude, Grok, Google Gemini, and Microsoft Copilot. Discovery works through supported browsers when the LastPass browser extension is installed and enabled.

Can LastPass block employees from using AI tools?

Admins can set per-tool usage rules to allow, warn, or block each AI tool. AI usage guidance, the warning before detected sensitive data enters an AI prompt, is a warning system, not a block: the decision remains with the employee, and each warning is logged.

How much does LastPass Business Max cost?

Business Max is $11.00 per user/month, billed annually. AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect are included at no additional cost, and every business plan comes with a 14-day free trial.

Conclusion

For a small company, the practical path is browser-level discovery, graduated usage rules, and warnings at the moment sensitive data is at risk, all managed from one Admin Console. LastPass Business Max delivers that through the browser extension, with the three Monitoring & Protect capabilities included at no additional cost.

Already on Business Max? Enable AI Monitoring & Protect in your Admin Console and review your team's AI inventory. If you are on Teams or Business, explore Business Max and start with a 14-day free trial. Less time on passwords. More time on what matters.