Tools that strengthen software
Spine Toolshop is where organisations request Spine products. Start with Spine Shadow AI — discover unsanctioned AI, review it per person, and stop PII and source code before they leave the browser.
Flagship product
Observe. Understand. Protect.
Desktop agents and a browser extension show you which AI tools people actually use, then let you allow, review, or block them — including the prompts they try to send.
Discoveries
See Shadow AI per person, not just per machine
Each employee card lists the tools they run, hit counts, and a verdict. Expand a row for process, install, and CLI evidence — so review is grounded in what actually happened on the device.
Registry
Rank what the fleet is actually running
Cursor, Grammarly, ChatGPT, Claude, and local runtimes surface with risk tiers and a Needs review workflow. Approve sanctioned tools; keep the rest pending until security decides.
Prompt firewall
Block PII and code before the prompt is sent
The Chrome extension inspects ChatGPT, Claude, Gemini, and other web AI before submit. Set PII and source code to allow, redact, or block — separately for the public web and local models.
Catalog
Request a Spine product
A Spine operator reviews each request. Approved Shadow AI customers get a console organisation and a work-email allowlist for sensors.