Shadow software is any internal tool, script, or small application created outside normal IT or security oversight. It is often built by a team to solve a local problem quickly, then deployed without being added to official inventories, ownership records, or change-control processes. In security terms, that makes it a hidden asset: it may have broad permissions, weak logging, hardcoded secrets, or no clear patching plan.
It matters because attackers often exploit the same weaknesses that shadow software creates for defenders. Forgotten admin scripts, old automation jobs, and unreviewed connectors can preserve access long after they should be removed. Defenders reduce the risk by discovering these tools, assigning owners, reviewing privileges, and retiring unused code. Good software inventory and lifecycle management turn shadow software from a blind spot into a managed asset.