Question 1

What is shadow agent traffic?

Accepted Answer

Shadow agent traffic is automated AI traffic from agents and SDKs running without human oversight. It includes API calls from Claude Code, Cursor, Copilot, and custom AI agents that make requests using your credentials. 51% of AI traffic is now automated, and most security teams have zero visibility into it.

Question 2

How many secrets do developers leak to AI tools?

Accepted Answer

Based on real scans of developer workstations, the average developer leaks approximately 5.6 secrets per month to AI tools — including AWS keys, database passwords, API tokens, and private keys. For a 25-person team, that's approximately 141 secrets per month at risk.

Question 3

Can my VPN see shadow agent traffic?

Accepted Answer

No. Shadow agent traffic passes through your VPN as normal encrypted HTTPS traffic. Your VPN cannot inspect the contents of AI prompts or detect secrets being sent to AI providers. You need prompt-level DLP like CitrusGlaze to inspect AI traffic before it leaves your machine.

Shadow Agent Traffic Calculator

Your Shadow Agent Traffic Exposure