← AI inventory

Gemini

Google · Assistant · Confirmed · catalog google-gemini. Seen by 2 lanes through 2 findings.

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Combined score
81
Critical 76 from the strongest lane + 5 for 1 more
People
2
Distinct identities across every lane
Seen by
2
Source code, SIEM
First seen
Aug 27, 2026
Last seen 3 h ago
source-codefixturehardcoded-keyspublic-exposurecorroboratedsiemsiem-only
Evidence

Where it was seen

Strongest finding →
Source codeGitHub (demo)
Critical76

1 repo, 1 packages, 1 keys

Repos
1
Packages
1
Keys in code
1
Public repos
1
0 people · 12 d agoOpen finding →
SIEMSplunk (demo)
Medium45

560 events, 7 MB up via Splunk (demo)

Events
560
Uploaded
7 MB
Users
2
Sources
2
2 people · 3 h agoOpen finding →
Next steps

Recommended actions

  1. 01
    Gemini trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
    Source codeSIEM
  2. 02
    1 key for Gemini is in source control, including a public repository. Rotate them now, move to a secret manager, and turn on push protection so it cannot happen again.
    Source code
  3. 03
    Gemini SDKs appear in 1 repository. Decide whether this vendor is approved for engineering, and route calls through one gateway or an Azure OpenAI deployment so keys, logging, and data terms are managed centrally.
    Source code
  4. 04
    Direct HTTP calls to generativelanguage.googleapis.com bypass any SDK-level controls. Add the hosts to egress policy and prefer the sanctioned client library.
    Source code
  5. 05
    Gemini appears only in Splunk (demo) logs, not in Microsoft 365 signals, so it is reaching the network from devices or accounts Microsoft does not see. Block or coach at the gateway, and check which sources are unmanaged.
    SIEM
Who

People

PersonDepartmentSourcesSeen bySign-ins · 30 d
[email protected]
[email protected]
n/a
SIEM logs
SIEM0
[email protected]
[email protected]
n/a
SIEM logs
SIEM0
Vendor

Policy notes

Trains on data
Configurable
Enterprise tier
Available
Org policy
None set

Consumer Gemini activity is reviewed and used for training unless disabled; Workspace tier is not.

Lanes

Score by source

Each lane scores its own evidence. The combined score takes the strongest lane and adds five points per additional lane, capped at 100.