Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

Shadow App Discovery reports

The Shadow App Discovery reports provide visibility into cloud applications that are being used without organizational approval. These reports help you identify shadow app activity, assess the risk associated with unsanctioned applications, and review your sanctioned app inventory, enabling you to make informed decisions about which applications to approve, restrict, or block.

To navigate to these reports, follow these steps:

  • Select Cloud Protection from the application drop-down.
  • Go to Reports > Shadow App Discovery.
  • Choose a reports and select the desired time range from the Perio.

Available Reports

Report name Description Purpose
All Shadow App Requests Lists all requests made to shadow cloud applications.

Apps that are neither explicitly sanctioned nor unsanctioned are classified as shadow category. 		Use this report to gain visibility into shadow IT activity across your organization and identify services that need to be reviewed for approval or blocking.
Shadow Apps Lists all shadow cloud domains in use. Use this report to build a complete inventory of shadow and prioritize them for sanctioning or restriction based on usage.
Shadow High-Risk Apps Lists all requests to shadow applications classified as high-risk.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to identify high-risk applications in use that have not been reviewed or sanctioned by the IT team.
Shadow Non-Business Apps Lists all requests to applications classified as non-business.

Non-business is an internal app classification that includes categories such as social media, gaming platforms, and entertainment services. 		Use this report to identify personal or non-business apps in use that have not been reviewed or sanctioned by the IT team.
Top Actors Accessing Shadow Apps Lists actors ranked by their usage of shadow applications. Use this report to identify actors who are most actively using shadow cloud services and determine whether the apps should be approved or not.
Sanctioned App Requests Lists all cloud access requests that have been explicitly sanctioned through Sanctioned Applications settings. Use this report to review and maintain your sanctioned app inventory and verify that the approved application list reflects current organizational requirements.
Sanctioned High-Risk Apps Lists approved applications that are classified as high-risk.

High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. 		Use this report to identify cases where a sanctioned application may present security concerns, and to determine whether it should be blocked.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2026 Zoho Corporation Pvt. Ltd. All rights reserved.