AI visibility, intelligence, and governance

The intelligence behindhuman oversight of AI.

QWatch discovers the AI tools, assistants, and agents your workforce uses, connects that activity to the people and teams accountable for it, and turns it into the intelligence leaders need to govern adoption, risk, and response.

  • Web AI assistants
  • Desktop AI apps
  • Coding and CLI agents
  • Microsoft 365 Copilot
  • MCP servers and tools
  • Enterprise AI platforms
Illustrative product view with sample data.

Platform overview

QWatch Platform Overview

A short tour of QWatch, from discovering AI use across the organization to visibility into AI agents and their MCP connections, and the intelligence leaders use to govern it.

  • Discovering AI use across the organization
  • MCP and agentic AI visibility
  • Threat intelligence and targeted response
  • Governance and executive reporting

The QWatch Capability Map

Nine capability areas. One purpose.

Give the people accountable for AI the visibility and intelligence to make better decisions about adoption, risk, and response.

AI is becoming autonomous. Governance must stay human.

Visibility for every level of human oversight.

Human in, on, and over the loop are not features. They are how responsible organizations stay accountable for AI. QWatch supplies the facts each one depends on.

Human oversight of AI. Human over the loop: Leadership sets the governance policies, risk boundaries, and accountability for the whole AI ecosystem. Human on the loop: AI operates with growing autonomy while people monitor activity and intervene when appropriate. Human in the loop: People actively take part in AI-supported decisions and workflows. QWatch provides the visibility and intelligence for each.

Wherever AI is used

One view of AI across the organization.

QWatch deploys through the tools IT already uses and collects metadata about AI use, never the content.

  • In the browser

    Web AI assistants and services, and whether each session used a corporate, personal, or another organization’s account.

  • On the desktop and in the terminal

    Desktop AI applications, coding assistants, command-line agents, local models, and the MCP servers they connect to.

  • Inside Microsoft 365

    Copilot in Word, Excel, PowerPoint, Outlook, and Teams, measured per person.

  • Across enterprise AI platforms

    Connectors for other enterprise AI platforms, such as Google Gemini, bring their use into the same view.

AI Discovery and Visibility

Every AI tool in use, across every surface.

QWatch discovers the AI your workforce actually uses: in the browser, on the desktop, in the developer’s terminal, and inside Microsoft 365. New AI services are surfaced the first time they appear.

  • Web assistants, desktop apps, coding agents, local models, and Copilot in one inventory
  • New AI services discovered the first time they appear
  • Corporate, personal, or another organization’s account, without the login leaving the browser
  • One interaction seen twice is counted once
Illustrative product view with sample data.

AI Usage Intelligence

See how AI adoption is really evolving.

Who is using which AI tools, how often, in which departments and business functions, and whether the tools you pay for are adopted or displaced by alternatives.

  • Adoption by identity, department, category, and function
  • Licensed tools compared with the alternatives people choose
  • An executive dashboard for any period
  • Every figure drills down to the people, tools, and events behind it
Illustrative product view with sample data.

The agentic AI ecosystem

From the person to the outcome.

AI agents now reach enterprise systems through MCP servers. QWatch follows every relationship, from the human identity to the outcome, so each action stays accountable to a person.

How QWatch connects MCP activity to people: human identity, machine and AI client, MCP server, tool or operation, enterprise system, and outcome. Example: a software engineer’s coding agent uses the service desk MCP server to create a ticket in the ticketing system, and the ticket is created. QWatch shows who acted, through what, what was done, where, and with what result, using metadata only.

Agentic AI and MCP Visibility

Know what your AI agents are connected to, and what they did.

QWatch discovers which MCP servers your AI clients use, which ones they start, and where each server runs. For supported clients it shows the tools and operations agents call, the enterprise systems they reach, and the outcome of each call.

  • Every relationship traced from human identity to machine, AI client, MCP server, tool, enterprise system, and outcome
  • MCP servers shown as on the machine, inside your organization, or external
  • Each relationship shown with the evidence behind it
  • Each MCP server classified, reviewed, and owned, with every change recorded

AI Catalog Intelligence

Understand every AI tool before you decide.

A curated, growing catalog of 448 AI tools and surfaces, with vendor, country of origin, hosting, and data-handling posture, and an independent QWatch Assessment for each.

  • Classify each tool Company Licensed, Approved, Evaluation / Pilot, or Not Approved
  • New tools researched and approved by QAISG analysts before they join the catalog
  • Your activity, identities, and private tools stay in your environment
  • Share Not Approved domains with your own web gateway
Illustrative product view with sample data.

Governance and Risk Management

Turn AI policy into accountable practice.

Define AI usage policies once. QWatch checks observed activity against them across web, desktop, and Microsoft 365 use, and records every violation at the severity you set.

  • Plain-language alerts that say what happened and what to do
  • Repeats grouped, and alerts that close when the underlying decision changes
  • Governance Intelligence measures adherence and effectiveness over time
  • Adoption-first, visibility-first, or default-deny: the posture stays your choice
Illustrative product view with sample data.

AI Security and Threat Intelligence

Spot concerning AI activity, and know when a new threat affects you.

Twenty-eight AI-specific detectors explain every finding with its evidence. The AI Threat Landscape matches new vulnerabilities, malicious releases, and provider incidents to the AI tools and versions you actually run.

  • Clear answers: Affected, Can’t determine, Not affected, or Resolved
  • See which tools are exposed, who uses them, and when relevant activity occurred
  • AI acting with no one at the keyboard surfaced for review
  • Assess a tool’s published threat intelligence before you adopt it
Illustrative product view with sample data.

Targeted response

Targeted governance, not blanket blocking.

Blocking every AI tool when a threat appears stalls the business. QWatch shows which tools are exposed, who uses them, and when, so your people can choose a proportionate response.

The AI kill-switch question: why targeted governance beats blanket blocking Read the brief
Targeted response in three steps. First, which AI tools are exposed: a published vulnerability in a desktop AI assistant is matched to the versions in use. Second, who uses them and when: the affected devices, people, departments, and recent activity. Third, a proportionate response: the security team acts directly, or an approved, time-bound action is applied through supported integrations with existing security controls.

Governed containment

Act through the controls you already run.

Your security team can act directly, or QWatch can propose a time-bound, scoped response that your people approve, your existing controls apply, and QWatch verifies.

Governed containment: Propose, From evidence, with the scope shown; Approve, By a different person, with a reason; Apply, Through your gateway, CASB, or identity platform; Verify, Observed activity to the scope must fall; Restore, On expiry or decision, fully audited.

Identity and Organizational Intelligence

Know who is using AI, and where.

AI activity is attributed to people and departments through your own directory, using the strongest available signal. What cannot be attributed with confidence is shown, never guessed.

  • Identities and departments from Microsoft Entra ID, Okta, or Active Directory
  • Department roll-ups that match how leadership reports
  • Individual-level reporting off until your organization enables it
  • Role-based access, multi-factor authentication, and single sign-on
Illustrative product view with sample data.

Executive Reporting and Governance Evidence

Give leadership, and auditors, a clear picture.

Board Reports in PDF and PowerPoint summarize adoption, risk, governance, threat exposure, and trends for the period, and state what they could and could not see.

  • Reports for 30, 90, or 180 days with period-over-period trends
  • Scheduled reports and a daily summary by e-mail
  • Every administrative action recorded in a two-year audit trail
  • Evidence that supports AI governance obligations such as the EU AI Act and NIST AI RMF
Illustrative product view with sample data.

Enterprise Integration and Response

Works with the stack you already run, and acts through it.

QWatch adds AI context to your identity, security, and IT operations tools, delivers findings where your teams already work, and supports targeted response through the security controls you operate.

  • Findings streamed to Splunk and other SIEMs
  • Alerts to Slack, Microsoft Teams, e-mail, or webhooks, escalated until acknowledged
  • Deploys through the device management tools IT already uses
  • Approved, time-bound responses through your secure web gateway, CASB, and identity platforms
QWatch connects to: Identity: Microsoft Entra ID, Okta, Active Directory; AI platforms: Microsoft 365 Copilot, Google Gemini; Security operations: Splunk and other SIEMs, Webhooks; Collaboration: Slack, Microsoft Teams, E-mail; Device management: Microsoft Intune, Jamf, Google Admin; Security controls: Secure web gateways, CASB, Identity platforms.

QWatch in practice

What better AI decisions look like.

  • From shadow AI to a governed decision

    A new AI writing service appears in Marketing. QWatch identifies it, shows its vendor and hosting, and reveals most use is on personal accounts. The team classifies it, and the policy records every future use.

  • A vulnerability in an AI desktop app

    A high-severity issue is published. QWatch shows which devices run an affected version and who uses them, names the fixed version, and confirms when the fleet is resolved.

  • Accountability for an AI agent

    Security asks which external MCP services coding agents can reach. QWatch maps the services by placement, shows which were started, and, where collected, which tools were called and by whom.

  • Is the AI investment working?

    Months after licensing an enterprise assistant, leadership sees adoption by department, where an unapproved alternative is preferred, and where enablement should focus.

The governance lifecycle

Discover, decide, respond, and prove it. Continuously.

The AI governance lifecycle, repeated continuously: Discover, Every AI surface and MCP server; Attribute, To people, devices, and departments; Assess, Catalog, risk, and threat intelligence; Govern, Your classifications and policies; Investigate, Evidence-backed findings; Respond, Targeted action through your own controls; Report, Board, SIEM, and audit trail.

Designed for enterprise trust

Evidence for leaders. Privacy for people.

  • Usage, never content

    QWatch collects metadata about AI use. Prompts, responses, files, and tool arguments stay on the device.

  • Observe and govern

    QWatch informs and orchestrates. Enforcement stays in the security controls you already run, and every containment is approved by a person.

  • Privacy built in

    Individual-level reporting is off until you enable it, identity reveals are audited, and AI-assisted processing can be switched off.

  • Honest numbers

    "Not observed" never reads as "not used", and every report states what it could and could not see.

See QWatch in your environment.

A live walkthrough shows how QWatch discovers AI use, maps agents and their MCP connections, and turns activity into governance evidence your leadership can act on.