# Can DNS logs show shadow AI use?

Partly. DNS logs show which hosts look up the domains of known AI services, which is a good start and costs nothing if your resolver already logs queries: export a week of lookups and match them against a list of AI service domains. They miss encrypted DNS that bypasses your resolver, services reached through other domains or content-delivery networks, AI features built into tools you already use, and how much data actually moved. They also show the host, not the person, and a single lookup may come from a browser preloading a page. Treat DNS as the cheap first view and confirm with connection data before you act. NetSenX combines destinations with connection volume and timing, from the Pro plan, so you see which hosts use which AI services, including local model runtimes, and how heavily; it does not see the content of prompts. Pair it with your AI provider's admin logs for the content side.

FAQ: [AI use and AI security](https://netsenx.com/en/faq/ai) · https://netsenx.com/en/faq/can-dns-logs-show-shadow-ai-use

## Read next

- https://netsenx.com/en/shadow-ai-detection
- https://netsenx.com/en/ai-transparency

## Related questions

- [Can network monitoring see AI use in desktop apps, IDEs and command-line tools?](https://netsenx.com/en/faq/can-network-monitoring-see-ai-in-desktop-apps-ides-and-clis)
- [Can network monitoring see what employees type into an AI chatbot?](https://netsenx.com/en/faq/can-network-monitoring-see-what-employees-type-into-an-ai-chatbot)
- [Why do companies have no visibility into what staff share with AI tools?](https://netsenx.com/en/faq/why-do-companies-have-no-visibility-into-what-staff-share-with-ai)
- [Is shadow AI detection included in every plan?](https://netsenx.com/en/faq/is-shadow-ai-detection-included-in-every-plan)
- [MSP tools now offer shadow AI visibility. What does it actually see?](https://netsenx.com/en/faq/what-does-shadow-ai-visibility-in-msp-tools-actually-see)