Kasbah catches API keys, credentials, credit cards, and client data before they reach any AI tool. Detection runs entirely in your browser — your content never reaches our servers.
100% free · No account required · Works instantly
What it catches
Real patterns. Real risk. Stopped before they leave your device.
+ JWT tokens, OAuth tokens, shell commands, prompt injection, bearer tokens. Full list →
How it works
Install once. It runs silently. You only see it when you're about to share something you shouldn't.
Step 01
One click from the extension store. No account needed. 30 seconds total.
Step 02
ChatGPT, Claude, Gemini — everything works as usual. Kasbah watches for 6 moments: send, paste, upload, edit, browse, download.
Step 03
Low risk: silent. Medium: a small heads-up. High risk: a modal shows what was found. You always decide.
Normal content goes through. You see nothing.
Borderline content. A small, non-blocking alert.
High-risk. Action stops. You see exactly what was found.
Whether you're a consultant, freelancer, founder, or team — we'd love to hear from you. A human responds within a day.
Clipboard monitoring, file watching, team audit trail. Drop your email and we'll reach out when it's ready.
Transparency
The extension is free. Always.
We don't charge for the browser extension. We make money from professional tools — CLI, VS Code, SDK, API — and enterprise plans with team management and compliance features. The extension's business model is to be the thing you trust, so you upgrade when you need more.
We don't sell data. Ever.
No behavioral profiles. No ad targeting. No brokering. Your content never reaches our servers — detection runs locally in your browser. The only thing we receive (if you opt in) is anonymous performance metrics: detection speed and risk scores, never your actual text.
No crypto. No blockchain. No gimmicks.
Kasbah is a detection engine. It uses regex, entropy scoring, and ML classifiers — proven, auditable techniques. That's it. We removed blockchain integration that was added during early development because it added no value and raised legitimate trust concerns.
Telemetry is opt-in and off by default.
Anonymous usage metrics are disabled until you explicitly enable them in the extension Settings. When enabled, we receive detection speed and risk score numbers — never your content. You can toggle this at any time. Full details in our privacy policy.