ASAI Security ResearchIndependent public-source research
Public reviewread only

AI architecture and public-source research

Market map

See where AI is used, which security approaches may apply, and which models, tools, business systems, and data AI can reach. Explore solution approaches and public-source research for 66 currently displayed vendors.

Use cases shown1 of 5 use casesChange use case

Enterprise AI architecture

AI activity, security approaches, and connected systems

Read from where AI is used, through the security approaches connected to that use, to the models, tools, business systems, and data AI can reach. Select an approach to open its details beside the map.

Enterprise AI activity and security approach architecture

Choose a use caseHow do we govern AI risk, policy, and compliance?
Choose one use case to show the security approaches connected to it.
Selected use caseHow do we govern AI risk, policy, and compliance?

Showing the security approaches connected to this use case. Each additional approach names the extra circumstance it addresses.

Use this to understand oversight: what AI exists, who owns it, which policies apply, how exceptions are handled, and what evidence is retained. Technical controls appear only when they support those governance decisions.
  1. Stage 1

    Where AI is used

    • Workforce AI use

      Employees use assistants, browsers, and embedded AI features in daily work.

    • Enterprise assistants and approved AI platforms

      Sanctioned enterprise assistants and AI workspaces.

    • Custom AI applications and knowledge retrieval

      Internal copilots, model-backed applications, and systems that retrieve company knowledge.

    • Agents and coding systems

      Action-taking agents, coding assistants, developer tools, and automated workflows.

  2. Stage 2

    Approaches related to this use case

    • Agent and machine identity
    • Employee AI access and data
    • Governance, testing, and visibility
  3. Stage 3

    What AI can reach

    • Models and providers

      Hosted, internal, fine-tuned, and embedded models.

    • APIs, AI tools, and connectors

      Services that retrieve information or perform actions.

    • Enterprise applications and business systems

      Systems where AI reads or changes business records.

    • Sensitive data, retrieval and memory

      Databases, files, vector stores, prompts, and memory.