Zero Trust AI Control Dashboard

Currently only available on the beta portal.

The Zero Trust AI Control dashboard provides a centralized location to monitor AI activity, review security protections, and manage policies for AI applications used throughout your organization.

The dashboard brings together AI-related information and security controls from multiple ThreatLocker modules, allowing you to understand how AI tools are being used and manage the protections applied to them without navigating between different areas of the Portal.

Accessing the Dashboard

To access the dashboard, navigate to  the AI icon in the left navigation menu.

The dashboard page is responsive to screen size, and the layout will change on larger and smaller screens.  This article was written using a 15-inch laptop screen.

Organization and AI Application Filters

At the top of the dashboard, use the available dropdowns to select the information you want to view.

1.  Organization - Select an organization to view its AI applications, activity, and configured policies.

2. AI Agent - Select an individual AI application to focus on its activity and protections, or leave All AI agents selected to view information across all supported AI applications.

These filters allow you to focus on a particular organization or AI tool when investigating activity and reviewing security controls.

AI in Your Organization

The AI in Your Organization section provides an overview of AI applications and the security protections configured for them.

The table displays the following information:

Adding an AI Application

Select the + button in the upper-right corner of the AI in Your Organization section to begin adding an AI application.

Choose the AI application you want to configure and review the recommended policies available for it.

1.  Select whether the AI Application should be permitted for the Entire Organization or select a specific device group.

2.  Select whether the new policies you will be creating should replace any existing policies or be added to the top of the existing policy list.

Select Next to view the policies ThreatLocker recommends be added along with the AI Application.

To view the policies for each policy type, select the blue 'V' expand button.

Pick and choose which policies to add.

Important: ZTCA and Web Access policies cannot both be selected, and selecting one will deselect the other.

When Configuration Manager policies are included you may be prompted to choose to append list entries to or replace list entries in existing policies of the same type, and/or provide any additional organization-specific information, such as the AI tenant for the organization.

Select 'Next' to receive a summary of all policies that will be added or replaced.

Choose the 'Replace and Create Policies' button. You will be provided with a list of the polcies changes that were made along. 

AI Activity Charts

The charts provide visibility into activity associated with AI applications and services.

They help you identify commonly accessed AI services and understand how AI applications interact with files.

Top AI Sites

The Top AI Sites chart displays AI-related network activity grouped by domain.

This information can help you identify which AI services are being accessed most frequently within your organization.

Files Accessed by AI

Select the Files Accessed by AI tab to review file access activity associated with AI applications.

This information helps you understand how AI applications interact with organizational files and identify activity that may require further investigation.

Changing the Timeframe

Use the timeframe options in the upper-right corner of the chart to change the reporting period.

Select the desired timeframe to review activity for that period.

Policies and Applications

The Policies and Applications section provides a centralized view of AI-related applications and policies configured in your organization.

This section is divided into five tabs.

AI Applications

The AI Applications tab displays AI-related applications identified within Application Control, helping you understand which AI applications are permitted or denied within your organization.

For each application, the table provides information such as:

1. OS: The operating system associated with the application.
2. Application Name: The identified application.
3. Rating: ThreatLocker application rating information, including Risk, Business, and Combined scores.
4. Computers: The number of computers associated with Permit and Deny policies.
5. Action: The configured Permit or Deny action. If there is a mix of policy actions, this will be displayed without a permit or deny selection.  Quickly change all policies to permit or deny by changing the selection in this area.
6. New Policy: Create a new Application Control policy.
7. Navigate to the Applications page by pressing the diagonal arrow next to Policies and Applications.

Select an application to access additional application information and its associated policies.

AI Web Policies

The AI Web Policies tab displays Web Control policies associated with AI applications or AI-related web categories.

Available information includes:

1. Policy name.

2. Policy level.

3. Number of computers covered.

4. Policy status.

5. Permit or Deny action.

6. 'New Policy' button to create a new Web Control policy.
7. Show inactive button allows you to choose to also see inactive policies in the list.
8. Navigate to the Web Control policies page by pressing the diagonal arrow next to Policies and Applications while on this tab.

Use this tab to review and manage how users access AI-related websites and services.

AI Control Policies

The AI Control Policies tab displays  AI Control policies configured for AI applications.

AI Control Policies extend traditional Ringfencing protections to the entire process chain initiated by an AI application. This ensures that Ringfencing restrictions continue to apply even when the AI tool launches or uses other processes to perform actions on its behalf.

The table provides an overview of each policy, including where it applies, which applications it protects, the restrictions configured, and its current status.

1. Policy Level:  Displays the level at which the policy applies to
2. Conditions: Displays the applications that are being controlled by this policy
3. Restrictions: Displays the Ringfencing restrictions being applied. Blue indicates restrictions are applied and gray indicates there are no restrictions applied.
4. Status: Displays the current status of the policy, which can be Monitor, Secure, or Inherited.  Monitor logs the activity without preventing it. Secure will always enforce the restrictions even when the computer is not in Secured mode. Inherited will inherit the same mode as the computer.
5. 'New Policy' button to create a new AI Control policy.
6. The Show inactive checkbox allows you to choose to also see inactive policies in the list.
7. Navigate to the Ringfencing policies page by pressing the diagonal arrow next to Policies and Applications while on this tab.

AI Cloud Access

The AI Cloud Access tab displays cloud access policies associated with individual AI SaaS platforms, such as ChatGPT and Claude.

Unlike AI Web Policies, which can be organized by web category, AI Cloud Access policies are associated with specific SaaS platforms.

1. AI Site: The SaaS platform and its associated domains.
2. Action: A link to view an existing policy or configure a new AI Agent policy. Use View Policy to open a configured policy or + Configure AI Agent Policy to configure access for an AI platform.
3. 'New Policy' button to create a new AI Cloud Access policy.
4. Navigate to the Secure Network policies page by pressing the diagonal arrow next to Policies and Applications while on this tab.

AI Configuration Manager Policies

The AI Configuration Manager Policies tab displays all available Configuration Manager policies that are relevant to AI applications.

1. Status: Displays the status of each Configuration Manager policy.
2. Policy/Configuration Name: Shows the name of the policy and the configuration it controls.
3. Applies To:  Shows where the policy is currently applied. It will be blank for policies that are not configured.  Select the policy name to open the sidebar and quickly edit or enable the selected policy.
4. 'New Policy' button to create a new Configuration Manager policy.
5. Navigate to the Configuration Manager policies page by pressing the diagonal arrow next to Policies and Applications while on this tab.

Refreshing Dashboard Information

Select the refresh icon in the applicable section to retrieve updated information.

Refreshing can be useful after creating or modifying policies to ensure the latest available information is displayed.

Managing AI Security from One Location

The Zero Trust AI Control dashboard combines AI discovery, activity monitoring, and security policy management into one interface.

For administrators, this provides a convenient way to review AI protections, investigate activity, and configure additional security controls.

By regularly reviewing the dashboard, you can better understand AI usage throughout your organization and maintain appropriate security controls as AI adoption increases.