An assistant leaked data while reading email
ShadowLeak involved connected enterprise Gmail and web access. Ordinary assistant tasks triggered the leak; the reported flaw was fixed.
For people using connected AI assistants
What can your AI assistant access?
An email connection can include private messages, documents and account notices. Check what you’ve connected and which permissions need a closer look.
Six questions. The check doesn’t connect to your accounts or ask for a password.
What an email connection may include
Illustration of possible access
Your AI assistant
Access depends on its permissions
Connected to
Your inbox
Which messages can it read?
May contain
Documents & personal messages
Statements, attachments, conversations
Account notices & recovery messages
Visibility varies by app and provider
Inbox access alone doesn’t establish access to your bank.
An illustration, not a scan of your accounts.
Free check · No sign-inPlain-English guide · Updates in progressPublished research · Sources and limitations
An illustration of prompt injection, not a live attack.
Why these connections deserve a look
An assistant can mistake a message for an instruction.
Researchers have demonstrated attacks that use text inside an email to influence an assistant. What happens next depends on the assistant’s tools, permissions and safeguards.
The check helps you identify what to review. It cannot tell whether an account has been compromised.
Read the ShadowLeak research ↗
2025 research example.
The reported flaw was fixed.
The free check
Review your AI connections.
Your answers highlight what to look at more closely. This check does not scan your accounts or determine whether they are secure.
Your estimated exposure
Your exposure score
0 / 10
Your email answers differ. You reported no connection alongside email access, or a connection alongside no email access. Start again to review those details.
This is a review score based on reported access, not the chance of being hacked. It does not scan your accounts or verify their settings.
How the score works
Our editorial rubric adds points for the access you report. It is not a validated security assessment.
- Email connected: 2 points.
- That connection can send email: 1 more point.
- Recovery messages go to that connected inbox: 2 more points.
- The assistant can read text messages: 2 points.
- It can take actions without asking: 2 points.
- Email or text sign-in codes, alongside reported email or text access: 1 point. This flags a possible overlap, not verified access to a code.
Lower: 0–2. Moderate: 3–5. High: 6–10. Unknown answers produce the lowest and highest scores consistent with what you reported. Sign-in methods and approval requirements never cancel points for other reported access.
AI EXPOSURE REVIEW
What Your AI Agent Can Reach, and How to Close It
CONNECTIONS · EMAIL · ACCOUNT SETTINGS
AI Exposure Review · PDF guide
The practical guide
A guide to reviewing AI access.
The guide covers email connections, account settings and sensitive documents in old mail. It includes a worksheet for your review.
- 01Review the accounts and devices you use
- 02Understand email and account recovery settings
- 03Check sensitive documents in old mail
- 04Keep a worksheet for future reviews
Free PDF No payment or signup required
The free PDF is being updated and is not yet available to download.
Ask about the guideEvidence, with context
What the research showed
Different incidents involve different kinds of access. None of these examples is a scan of your setup.
Research: Radware ↗
A summary displayed a false security warning
A crafted email influenced Gemini’s summary. The demonstration concerned deceptive output, not a proven bank-account takeover.
Common questions
Does the check connect to my accounts?
No. It uses only the answers you select. It does not inspect your inbox, test your passwords or establish whether an account has been compromised.
Do I need to stop using AI?
The purpose is to understand the access you have allowed. Some changes may limit features; the right choice depends on the work you want your assistant to do.
Is the guide free?
Yes. The PDF will be free, with no payment or signup required. It is being updated before download is available.
Does this guarantee my accounts are secure?
No. This material focuses on selected AI connections and account-access risks. It does not cover every way an account can be compromised.