LastPass has expanded its Business Max bundle with two new governance features: AI Monitoring & Protect and Web Monitoring & Protect. The tools work from the company's browser extension and are designed to close the gap between how quickly employees adopt AI and how much visibility IT teams have into that usage.
AI Monitoring gives administrators a view of which AI tools employees use in the browser, helping them identify shadow AI. AI Protect then adds a guardrail: when a user attempts to share sensitive data such as credentials, API keys, or personal information with an AI tool, the extension logs the attempt and shows a real-time warning. The company cites survey data showing 92% of organizations report AI is already in use, while nearly two-thirds have significant ungoverned AI use or lack visibility into it. It also notes that 68% of organizations are most concerned about employees entering sensitive data into AI tools.
Web Monitoring & Protect, meanwhile, provides website discovery, malicious-site blocking, and category-based rules. Admins can block, warn, or allow entire categories of sites, with a dedicated Malicious/Risky category for phishing and malware. The system uses AI-powered domain classification to keep up with new sites, though admin-set app-level rules always take precedence.
LastPass chief product officer Don MacLennan said in the announcement that AI's value is too great to ban completely, and that organizations need a way to embrace it while managing security risks. The new capabilities are available to all Business Max customers, alongside the previously available SaaS Monitoring and SaaS Protect.