DIY Shadow IT: The AI Augmented Citizen Developer
Enterprises are witnessing a silent but seismic shift: employees are no longer just using technology, they’re creating it.
Updated October 7, 2026 · Changelog
Fueled by AI copilots, no-code tools, and generative interfaces, the rise of the AI-augmented citizen developer is reshaping how organizations design, deploy, and govern internal software.
But, there’s a twist. The majority of these tools are currently categorized as shadow IT within the organization. In other words, their adoption is not sanctioned by InfoSec or IT.
Key Highlights:
- AI-powered coding tools (Copilot, Cursor, Windsurf) are now nearly universal in enterprise environments. (98% among Torii users)
- Unsanctioned tools such as Lovable and Base44 are scaling faster than IT governance frameworks can adapt.
The Citizen Developer Revolution
Until recently, building an app meant submitting a Jira ticket to IT and waiting.
Now, with natural-language coding, drag-and-drop workflows, and LLM-powered copilots, employees are bypassing these bottlenecks entirely.
“Citizen developers use domain expertise and creativity to develop apps, configure automations, and build data analyses that can quickly drive value across the enterprise.” Tom Davenport, MIT Initiative on the Digital Economy
The term “vibecoding” has emerged to describe this behavior: creating through intuition, guided by AI rather than syntax.
“A citizen developer is an employee who creates application capabilities for consumption by themselves or others, using tools that are not actively forbidden by IT or business units.”
Drivers of Growth
- Accessibility: AI and no-code interfaces remove technical barriers.
- Speed: Internal approval cycles can’t match the pace of business need.
- Culture: Innovation has decentralized, every employee is now a potential maker.
Which AI and No-Code Platforms are More Popular?
As the leading platform for Shadow IT discovery and management, Torii provides unmatched visibility into the technologies employees adopt beyond official IT channels. Drawing on anonymized usage data, we analyzed which no-code and AI-assisted platforms are currently most prevalent inside enterprise environments.
The findings below reveal the percentage of companies where each tool is actively in use. It’s a snapshot of how deeply citizen-developer activity has become embedded in today’s workplaces.
Show as table
| App | Adoption | Domain Rating | Referring domains | Search interest |
|---|---|---|---|---|
| Replit | 68% | 85 | 56,000 | 41 |
| Lovable | 64% | 89 | 28,000 | 61 |
| Base44 | 38% | 63 | 805 | 1 |
| Hostinger Horizons | 13% | 91 | 184 | 1 |
| Bolt | 2% | 79 | 5,700 | 0 |
Sources: Torii anonymized usage data (adoption); Ahrefs (Domain Rating, referring domains); Google Trends (search interest, 0 to 100). Chart published October 7, 2025.
These tools are increasingly present even in IT-restricted environments, indicating grassroots experimentation on a large scale.
For comparison, we also analyzed the prevalence of popular Integrated Development Environments (IDEs) and found similarly high numbers such as GitHub Copilot with 98%, Cursor with 79%, and Windsurf with 58%.
The Governance Gap: Shadow IT
As adoption surges, IT governance struggles to keep pace.
Lovable ranked #12 in viral enterprise adoption Aug 2024, Aug 2025, doubling its user base within 31 days inside organizations. Its Shadow IT Index Score of 64% indicates that the majority of usage was unsanctioned.
Base44 appeared as the #2 most prevalent Shadow IT app in October 2025 with a Shadow IT score of 100%, suggesting an acceleration in both usage and governance exposure.
While the cause for this rapid adoption without approval is unclear, surveys show that only about 40% of employees say their companies actively encourage/promote AI adoption, indicating a gap between individual enthusiasm and official policy.
The New Frontier
Citizen developers have become a natural outcome of the modern workplace; they’re a sign of creativity outpacing structure. Each unsanctioned app is less an act of rebellion than a response to constraint.
Their presence marks a transition point for enterprise technology: a world where software evolves from both the bottom up and the top down.
Apps in this article
Changelog
- ClarificationStandardized the data source description.
- UpdateMoved from toriiresearch.com.