AI spm tools: what are you actually using in prod?

anyone here running ai spm in real life, not just slideware? we’ve got a bunch of genai stuff popping up (mostly azure openai + some internal apps + random “shadow ai” experiments) and i’m trying to figure out what “good” even looks like for AI security posture management. like, is the main value inventory + policy checks, or are people actually catching risky prompts, over-permissioned connectors, exposed model endpoints, sketchy data flows into vector stores, etc. would love to hear what worked, what was noisy, and what you wish you measured earlier.