BLOG
Blog
Notes on OAuth and OIDC, shadow IT, and shadow AI for people who build internal apps.
Shadow AI: AI-built apps and AI tools outside IT's view, and a practical approach
19 October 2026
Shadow AI is shadow IT with a new engine: colleagues using AI tools and AI-built apps without IT knowing. What the real risks are (data in prompts, unreviewed generated code, agents with too much access), why a ban does not hold, and how cyantula gives AI-built apps and agents a governed home behind the company login.
Shadow IT: why colleagues build their own apps, and how to make that safe
12 October 2026
Shadow IT is usually colleagues solving real work, not sabotage. Why banning it fails, what the real risks are for self-built internal apps, and how cyantula turns those apps into governed ones behind the company login.
OAuth and OIDC, explained for people who build internal apps
9 October 2026
What OAuth and OpenID Connect actually do, why a homemade login in a quick internal tool is riskier than it looks, and how cyantula puts the company login in front of every internal app instead.