Blog
Recent
Product Updates

Now in LastPass Business Max: AI Visibility, Governance, and Web Controls

Shireen Stephenson • PublishedSeptember 29, 2026

What the new September 2026 Business Max capabilities mean for you:

LastPass Business Max now includes five new capabilities across four categories: 

AI Monitoring 

  • Shadow AI tool discovery: You get expanded visibility into employee AI usage across supported AI platforms (available now). 

AI Protect 

  • AI usage guidance: Employees get a real-time, in-browser warning before they share detected sensitive data with AI tools. Every warning is logged automatically in your User Activity list (coming soon!) 

Web Monitoring 

  • Website discovery: You can get visibility into websites employees visit, where they may be exposed to risk, and when they last accessed them (beta). 

Web Protect 

  • Malicious site blocking: You can block categories of malicious/risky sites that include phishing, malware, and non-work categories (gambling, social media, piracy, adult content) in one click (beta). 
  • Website usage rules by category: You can now set usage rules across 25+ automatically identified site categories (beta). 

Already a Business Max user? There’s nothing new to deploy; simply enable the features from the Admin Panel. All five capabilities run on the browser extension you already trust. 

 

92% of organizations say their employees are using AI. But only 22% can log or monitor this usage (LastPass 2026 State of AI and SaaS Security Report). That means most organizations have little visibility into AI adoption.

What you told us

You're running a lean operation, and the buck stops at your desk. 

Meanwhile, the tools that help your team move fastest often include some level of AI functionality. Some you know about, and others you don’t.

Yet the moment something sensitive ends up in a prompt, explaining how it happened and whether warning signs were missed becomes your problem. 

And you aren’t alone: 68% of security teams say sensitive data entering AI tools is their #1 concern (LastPass 2026 State of AI and SaaS Security Report).

This is where Business Max comes in.

Business Max now delivers five new capabilities: shadow AI tool discovery, AI usage guidance, website discovery, malicious site blocking, and website usage rules by category.

Together, these capabilities can help you gain visibility into AI usage, guide employees at the moment of risk, and apply in-browser controls to reduce the likelihood that an everyday mistake doesn’t turn into a major security incident.

New in Business Max: five new capabilities across AI Monitoring, AI Protect, and Web Protect

AI Monitoring: Shadow AI tool discovery (available now)

Gain visibility into AI adoption across your organization: Control starts with knowing what's running across your organization. AI Monitoring surfaces which AI tools your employees are signing into daily through supported browsers, including tools that have bypassed procurement.

You don't have to perform manual audits or deploy new infrastructure to get continuous visibility. With AI Monitoring, governance decisions are based on actual behavior and real-time data.

AI Protect: AI usage guidance (coming soon!)

Guide users at the moment of risk

AI Protect provides a real-time warning before detected sensitive information is shared with AI tools, helping your employees make better decisions at the moment of risk.

And warning events are logged, giving you visibility into potentially risky interactions and a record of when warnings occurred without preventing productive work from happening.

Web Monitoring: Website discovery (beta)

See website activity and risk exposure across your workforce

Website discovery: Helps you gain insight into website activity across your workforce to understand browsing patterns, see when sites were last accessed, and identify potential risk exposure. 
 
This means you get the context needed to make web governance decisions with confidence.

Web Protect: Malicious site blocking (beta) + website usage rules by category (beta)

Apply web controls at scale

Malicious site blocking: Lets you block potentially malicious domains, credential-harvesting phishing sites, and fraudulent links, a level of protection many organizations typically must purchase (and manage) through a separate vendor.

Website usage rules by category: Lets you apply usage rules across 25+ site categories, from gambling and social media to adult content.

Instead of managing websites one by one, you can apply a single rule across an entire category. 

That means less admin overhead, more consistent governance, and broader protection.

AI Monitoring & Protect and Web Monitoring & Protect are included in Business Max at no additional cost

All designed to help you strengthen AI governance without having to add staff or deploy any new infrastructure.

Already on Business Max? Explore the new capabilities in your admin console.

On Business or Teams? Upgrade to Business Max to add AI visibility and web controls.

 

FAQs: LastPass Business Max expansion

No. Both AI Protect and Web Protect run through the LastPass browser extension. There’s no new software to install or device management required.

No. LastPass AI usage guidance is a warning system, not a block. When an employee is about to share detected sensitive data, whether that’s a password, API key, or other sensitive information, with an AI tool, they see a real-time warning before the data is submitted. 

The decision remains with the employee. Every warning interaction, however, is logged in your User Activity list, so you have a record of it.

LastPass’s AI Protect and Web Protect capabilities are access-layer controls built into Business Max. They give you visibility and usage rules at the browser level, without deploying agents, gateways, or proxies.

DLP, SSPM, and CASB solutions serve different purposes. They’re often used as joint controls within a broader SaaS governance effort to protect sensitive data and reduce risk from SaaS misconfigurations, excessive permissions, and insecure integrations (Fortinet).

LastPass Business Max isn't a replacement for those tools. Instead, it can complement them by helping you discover AI usage, guide employee behavior at the point of risk, and apply browser-level controls.

LastPass Business Max now includes five new capabilities: 

AI Monitoring 

  • Shadow AI tool discovery: Gives you a expanded visibility into the AI tools your employees access across supported AI platforms (available now). 

AI Protect 

  • AI usage guidance: Delivers real-time warnings before employees share detected sensitive data with AI tools (coming soon!).  

Web Monitoring 

  • Website discovery: Helps you gain visibility into websites employees visit, where they may be exposed to risk, and when they last accessed them (beta). 

Web Protect 

  • Malicious site blocking: Blocks malicious domains, credential harvesting phishing sites, and fraud links (beta). 
  • Website usage rules by category: Lets you set usage rules across 25+ automatically identified site categories (beta). 

AI Monitoring & Protect, SaaS Monitoring & Protect, and Web Monitoring & Protect are included exclusively with LastPass Business Max. 

If your organization is currently on LastPass Business or Teams, upgrading to Business Max provides all three capabilities for AI usage visibility, app access controls, and data loss prevention.

Business Max costs $11 per user/ per month after a 14-day free trial. 

LastPass AI Protect covers the following AI tools: OpenAI/ChatGPT, Claude, Grok, Google Gemini, and Microsoft Copilot. Coverage applies across corporate and personal accounts for these tools when accessed through the browser.
Share this post via:share on linkedinshare on xshare on facebooksend an email