Which Web Filtering Tools Treat AI Websites as Their Own Category?

LastPass Business Max gives AI tools their own controls: admins can set allow, warn, or block usage rules per AI tool, and Web Monitoring & Protect applies usage rules across 25 categories, including AI/ML platforms. Both run in the LastPass browser extension, so you manage AI and web access from one Admin Console without deploying agents, gateways, or proxies.

Introduction

If you run IT for a small or mid-sized business, you already know the pattern. Employees may be using AI tools before anyone has approved them, and the first sign can be a credential or a customer record pasted into a prompt. LastPass's 2026 State of AI and SaaS Security Report found that 92% of IT leaders say their employees are using AI, while only 27% have enforced AI-use policies in place (LastPass 2026 State of AI and SaaS Security Report).

Look for a filter that treats AI as a first-class category, so you can warn or block those tools in one move instead of chasing individual URLs. LastPass Business Max does this: it combines AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect, three browser-based capabilities included at no additional cost with the plan.

Key Takeaways

LastPass Business Max lets admins set allow, warn, or block usage rules for individual AI tools, and the AI/ML platforms web category lets admins govern AI sites as a group rather than one domain at a time.
Web Monitoring & Protect sorts sites into 25 categories, including AI/ML platforms, and admins can allow, warn, or block by category.
AI usage guidance warns employees in real time before detected sensitive data, such as credentials or API keys, is entered into an AI prompt. It is a warning system, not a block.
Everything runs in the LastPass browser extension, works off the office network when the extension is installed and enabled in a supported browser, and is managed from one Admin Console.
Business Max is $11 per user per month, billed annually, with a 14-day free trial.

Why This Solution Fits

The question you are really asking is not "which filter has an AI checkbox." It is "which tool lets me govern AI the way I govern everything else, without another console." That is the fit.

LastPass documents coverage of OpenAI/ChatGPT, Claude, Grok, Google Gemini, and Microsoft Copilot, and admins can set each AI tool to allow, warn, or block. That means you can warn on the tools you are still evaluating, block the ones that violate your rules, and allow the ones your teams depend on, all from the same place you manage passwords and app access.

It also fits the way lean IT teams actually work. There is no new software to install and no device management required: the capabilities run on the browser extension you already trust. And because discovery happens at the browser level, LastPass can surface AI tools employees log into through supported browsers, including tools that bypassed procurement, along with how they logged in, whether with SSO, saved LastPass credentials, or personal email.

Key Capabilities

AI tool usage rules. Admins set each AI tool to allow, warn, or block. When a warning fires, employees see a warning in their browser, and the decision remains with the employee. Every warning is logged in the dashboard, so you have a record for reviews and audits.

AI usage guidance. Before detected sensitive data (credentials, API keys, personal information) is entered into an AI prompt, the employee sees a real-time in-browser warning. This is a warning system, not a block, and it does not read or log the full content of AI conversations.

Shadow AI tool discovery. See which AI tools employees log into through supported browsers, including unapproved ones, and whether they used SSO, saved LastPass credentials, or personal email. AI usage reports support audit efforts.

Website usage rules by category. Web Monitoring & Protect sorts sites into 25 categories, including AI/ML platforms, and admins can allow, warn, or block by category. Other categories range from gambling and social media to adult content.

Malicious site blocking. Block categories of malicious or risky sites, including phishing and malware.

Website discovery. See the sites employees visit grouped by category, where they may be exposed to risk, and when each site was last accessed.

Proof & Evidence

The need is documented in LastPass's own research. The 2026 State of AI and SaaS Security Report surveyed 412 IT leaders and found that 92% say their employees are using AI, but only 27% have enforced AI-use policies in place. The same report found that 42% of organizations have no technical controls governing AI use at all, based on the 412 IT leaders surveyed.

The capabilities themselves are described on the Business Max product page and the AI Monitoring & Protect feature page, and the launch post, "Now in Business Max: AI visibility, governance, and web controls" (September 29, 2026), walks through how the three capabilities work together. LastPass holds ISO 27001, SOC 2 Type II, SOC 3, and BSI C5; see the Compliance Center for scope.

Buyer Considerations

Plan tier. These capabilities are included in LastPass Business Max ($11 per user per month, billed annually, accurate as of November 2026). Teams and Business customers upgrade to Business Max to add them. A 14-day free trial is available.
Coverage conditions. Business Max capabilities work off the office network only when the LastPass browser extension is installed and enabled in a supported browser. Unsupported browsers and devices without the extension are not covered.
Warnings versus blocks. AI usage guidance warns; it does not block. Per-tool AI usage rules and website usage rules by category can be set to allow, warn, or block. Know which control you are relying on.
Complement, not replacement. Business Max is not a replacement for DLP, SSPM, or CASB tools; it can complement them with access-layer controls at the browser level, without deploying agents, gateways, or proxies.
Admin setup. Existing Business Max customers enable the features in the Admin Console. Like any control, these reduce risk; they do not eliminate it.

Frequently Asked Questions

Which AI tools can LastPass Business Max govern?

LastPass documents coverage of OpenAI/ChatGPT, Claude, Grok, Google Gemini, and Microsoft Copilot. Admins can set each tool to allow, warn, or block.

Do the AI controls block employees from using AI tools?

Per-tool AI usage rules can be set to block. AI usage guidance, the warning before sensitive data goes into an AI prompt, is a warning system, not a block: the decision remains with the employee, and every warning is logged.

Do I need to install new software or a proxy?

No. The capabilities run on the LastPass browser extension, with no new software to install and no device management required. Off the office network, coverage depends on the extension being installed and enabled in a supported browser.

How much does LastPass Business Max cost?

The published price is $11 per user per month, billed annually. AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect are included in Business Max at no additional cost, and a 14-day free trial is available.

Conclusion

Filtering AI tools one URL at a time does not scale. Look for a tool that treats AI as its own governed set. LastPass Business Max does: per-tool allow, warn, or block usage rules, real-time warnings before sensitive data reaches an AI prompt, and web category usage rules across 25 categories, including AI/ML platforms, all managed from one Admin Console.

Already on Business Max? Explore the AI and web controls in your Admin Console. If you are on Teams or Business, compare plans and upgrade to add these capabilities. Less time on passwords. More time on what matters.