Built to catch every prompt — without ever reading it.
Two products, one unified dashboard. Coverage for remote employees, office networks, and every shadow AI tool in between.
What does an AI DLP browser extension do? An AI DLP browser extension intercepts every prompt typed into AI web apps — ChatGPT, Claude, Gemini, and hundreds more — scanning the text locally for sensitive data like PII, API keys, and proprietary code, then blocking or redacting it before it reaches the AI service.
What is an AI gateway device? An AI gateway is a network appliance that inspects AI-bound traffic from every device on your office network — including desktop apps, CLI tools, and BYOD devices that browser extensions cannot reach — enforcing DLP policies at the network layer without requiring software on each endpoint.
Catch leaks at the keyboard, before they ever leave.
Install once via MDM or one-click. The extension intercepts every prompt typed into ChatGPT, Claude, Gemini, and 300+ other AI services. DLP scanning runs locally — verdicts in milliseconds.
How it works
Intercept
Hooks the textarea and outbound XHR for every supported AI site. The user keeps typing — the extension stays out of the way.
Scan locally
200+ pre-built detectors run in WebAssembly inside the page sandbox. Spots PII, secrets, proprietary code, financials in under 50ms. Add custom rules for your industry.
Apply policy
Start with pre-built rule sets or create your own. Block, redact in-place, warn, or log — per team, per tool, per data class.
Forward verdict
Only metadata — destination, classification, action, hashed user — goes to the dashboard. Never the prompt itself.
What's inside
Local scanning engine
200+ pre-built detectors covering SSNs, credit cards, API keys, JWTs, proprietary code, PHI, and more. Extend with custom rules for your data types.
In-page warning overlay
Branded toast that explains why a prompt was blocked, with a one-click "redact and resend" path.
Adapter library
Site-specific adapters for ChatGPT, Claude, Gemini, Copilot, Perplexity, Poe — auto-updates without redeploy.
Policy sync agent
Pulls latest org policy every 5 minutes. Works offline; replays verdicts when reconnected.
Force-install profiles
Chrome/Edge ADMX, Jamf, Intune, and Kandji manifests in your dashboard, ready to copy.
SCIM + SAML connectors
Sync users from Okta, Google Workspace, Azure AD. Map groups to policies in one click.
See it in action
Extension popup — real-time scan stats and policy status at a glance.
A prompt containing PII is blocked before reaching ChatGPT.
Awareness banner reminds users that AI conversations are monitored.
Sensitive fields are automatically redacted — the prompt still sends, minus the risk.
300+ AI tools detected and monitored — and growing.
Blacksight maintains a continuously updated catalog of AI services. Every destination is classified, categorized, and available for policy rules. Here are some of the tools we cover.
Chat & general AI
- ChatGPT chat.openai.com
- Claude claude.ai
- Gemini gemini.google.com
- Copilot copilot.microsoft.com
- Perplexity perplexity.ai
- Poe poe.com
- Mistral chat.mistral.ai
- DeepSeek chat.deepseek.com
- Grok x.com/i/grok
- HuggingChat huggingface.co/chat
- Pi pi.ai
- Character.ai character.ai
- You.com you.com
- Phind phind.com
- Cohere Coral coral.cohere.com
Code & developer AI
- GitHub Copilot copilot.github.com
- Cursor cursor.com
- Windsurf windsurf.com
- Replit replit.com
- Tabnine tabnine.com
- Amazon Q aws.amazon.com
- Sourcegraph Cody sourcegraph.com
- JetBrains AI jetbrains.com
- Cline cline.bot
- aider aider.chat
- Bolt bolt.new
- v0 v0.dev
- Lovable lovable.dev
Image, video & media AI
- DALL-E openai.com
- Midjourney midjourney.com
- Stable Diffusion stability.ai
- Leonardo.ai leonardo.ai
- Ideogram ideogram.ai
- Adobe Firefly firefly.adobe.com
- Runway runwayml.com
- Pika pika.art
- ElevenLabs elevenlabs.io
- Suno suno.com
- Kling klingai.com
- Luma lumalabs.ai
Writing & content AI
- Jasper jasper.ai
- Copy.ai copy.ai
- Writesonic writesonic.com
- Notion AI notion.so
- Grammarly AI grammarly.com
- QuillBot quillbot.com
- Rytr rytr.me
- Wordtune wordtune.com
- Sudowrite sudowrite.com
- Moonbeam gomoonbeam.com
Business & productivity AI
- Microsoft 365 Copilot microsoft.com
- Google Workspace AI workspace.google.com
- Salesforce Einstein salesforce.com
- HubSpot AI hubspot.com
- Slack AI slack.com
- Zoom AI zoom.us
- Otter.ai otter.ai
- Fireflies.ai fireflies.ai
- Beautiful.ai beautiful.ai
- Gamma gamma.app
Research & data AI
- Elicit elicit.com
- Consensus consensus.app
- Semantic Scholar semanticscholar.org
- Wolfram Alpha wolframalpha.com
- Scite scite.ai
- Connected Papers connectedpapers.com
- Julius julius.ai
- ChatPDF chatpdf.com
- Docugami docugami.com
One appliance. Every device on your network. Every AI tool.
A 1U or desktop appliance that sits between your office network and the internet, inspecting AI-bound traffic only. Catches what browser extensions can't — desktop apps, CLIs, BYOD devices, and anything SSO can't reach.
What it catches
3-step setup
Plug it in
Power and ethernet. The Gateway acquires DHCP, calls home, and registers with your dashboard.
$ blacksight register --org acme
Connect to your network
One setting change in your router. The Gateway automatically sees AI-bound traffic from every device on your network — no software to install, nothing to configure per-device.
$ blacksight status: connected
Enforce
Policies you've already defined for the extension apply automatically. Real-time verdicts in the dashboard.
$ status: 142 devices · 0 alerts
Gateway pricing
Office desktop
Small offices and remote sites up to 50 devices.
- Devices supportedup to 50
- Throughput1 Gbps
- Form factordesktop
- Warranty2 years
Multi-floor / HQ
Mid-sized companies up to 500 devices. Includes 2 units for redundant failover.
- Devices supportedup to 500
- Units included2 (HA pair)
- Throughput10 Gbps
- Form factor1U rack
- Warranty3 years
Custom deployment
Unlimited devices, multi-site, custom SLAs, and dedicated support.
- Devices supportedunlimited
- Sitesunlimited
- Throughputcustom
- Replacementnext-business-day
- Supportdedicated engineer
The mission control for AI usage across your org.
A single web app that unifies activity, policy, alerts, audit logs, and user management — across every extension and every gateway.
Activity overview
Real-time stream of every prompt across your org. Filter by user, tool, severity, or policy outcome.
Policy builder
Visual rules editor with pre-built templates for common industries. Match by data class, destination, user group; choose block / redact / warn / log.
Real-time alerts
Slack, email, PagerDuty, or webhook for critical leaks. Triage and resolve from the alert.
Compliance reports
Pre-built SOC 2, HIPAA, GDPR, ISO 27001 templates. Schedule, export, share with auditors.
Users & groups
SCIM-synced from Okta, Google, Azure AD. Map groups to policies; track per-user risk scores.
Shadow AI catalog
Every AI service touched by your org, ranked by traffic. Sanction, block, or watchlist with one click.
Data classification
200+ pre-built detectors plus a custom rule builder. Add regexes, keyword lists, or ML classifiers for industry-specific data — no engineering needed.
Audit log
Tamper-evident, signed log of every admin action and every policy decision. Exportable to your SIEM.
Public API
REST + webhooks for everything in the dashboard. Stream verdicts to your SIEM, ticketing, or data lake.
We're a security company. We don't see your data.
Every byte of prompt content stays inside your perimeter. The dashboard receives only verdicts and metadata — what was matched (by class), where it was going, what we did about it.
What we never receive
- Prompt content (full or partial)
- AI-service responses
- File contents, code, or attachments
- Customer data or PII
- Any plaintext flagged by your detectors
What we do receive
- Detector class hits (e.g. "ssn × 2")
- Destination domain & tool name
- Hashed user ID + group membership
- Policy outcome (block / redact / log)
- Timestamp, byte count, latency
Ready to see and block what's leaving your company?
Free for 5 devices. Results in 10 minutes.