Free Azure Workbook for Microsoft Entra Global Secure Access

Every AI signal.
One cockpit.

See which AI tools your people use, what they share and where the risk is. Built on your Global Secure Access logs, live in two minutes.

Get the workbook See what's inside

Free · Runs in your tenant · No agents, no backend

136 AI apps recognized out of the box, plus everything Microsoft's cloud app catalog tags as generative AI

ChatGPT Claude Gemini Copilot Microsoft 365 Copilot Perplexity Le Chat DeepSeek Grok Meta AI Qwen Kimi Manus Poe
Cursor Windsurf Replit Lovable v0 Hugging Face Notion Gamma DeepL ElevenLabs Suno Midjourney Character.AI
Inside the cockpit

Everything AI. In one place.

Eight tabs that answer the questions your CISO is already asking.

AI fleet

Every AI app in use, ranked by traffic, users, uploads and risk score.

Risk radar

Popular vs. risky at a glance, scored with Microsoft's cloud app risk ratings.

Prompts

What people ask AI, including uploads and data loss prevention hits.

MCP & agents

MCP servers, tools and agents your teams wire up: read, write or destructive.

Security posture

One score, three next actions. No guesswork.

Adoption

From first-time explorers to agent builders: know who drives AI in your company.

Shadow AI

AI traffic without a known signature surfaces automatically, before it becomes a habit.

Also inside Search & filtersExplorerDevice insightsDark & light themeTime zonesExcel export
136AI apps recognized
8cockpit tabs
69live KQL queries
2minutes to deploy
Setup

Live in three steps.

1

Stream the logs

Send Global Secure Access traffic and AI insights logs to a Log Analytics workspace.

2

Deploy the workbook

One click on Deploy to Azure, or paste the JSON into a new workbook.

3

Open your cockpit

Data shows instantly. Every filter is optional.

Tip: enable TLS inspection for AI destinations to see prompts and MCP calls.

Privacy by design

Your data never leaves your tenant.

  • Pure KQL on your own Log Analytics workspace
  • No agents, no backend, no telemetry
  • App logos optional: switch them off for zero external requests
  • Readable JSON: audit every query before you deploy
ai-apps.kql0 external calls
let AiDomains = dynamic(["openai.com",
    "claude.ai", "gemini.google.com"]);
NetworkAccessTraffic
| where TimeGenerated > ago(7d)
| where DestinationFqdn has_any (AiDomains)
| summarize Users = dcount(UserPrincipalName),
            Requests = count() by DestinationFqdn
| top 10 by Users
FAQ

Good questions.

Is it really free?

Yes. The workbook is free for internal use in your organization. Redistribution or resale requires permission.

What do I need?

Microsoft Entra Internet Access (Global Secure Access) with traffic logs sent to a Log Analytics workspace. Prompt and MCP insights additionally need TLS inspection for AI destinations.

Does any data leave my tenant?

No. The workbook only runs queries in your own workspace. The single optional external request loads app logos from a public favicon service, and you can switch it off.

Will it work in my tenant?

It adapts to missing tables and columns and is validated against five log schema variants, so it shows data right after import.

Can I customize it?

Absolutely. It is a standard Azure Workbook: edit tiles, add queries, change filters and save your own version.

What do you do with my details?

We store your name, email, company, your approximate location (city and country, derived from your IP address) and your consent to send you the workbook and to contact you about it. No tracking, no data sale. Reply "unsubscribe" to any email and we stop.

Get your AI Command Center.

Free for internal use. Leave your details and the deploy link lands in your inbox within a minute.

  • Workbook with one-click Deploy to Azure
  • Setup checklist for Global Secure Access
  • Direct line for questions and feedback

Details in our privacy policy.