CyBox AI Guardian

Detects sensitive prompts and files on approved AI tools. Enforces Monitor, Warn, Mask, or Block policies. Content stays local. CyBox AI Guardian helps organizations use web-based AI tools safely through local sensitive-data detection, real-time policy enforcement, and centralized security visibility.

How it works

The extension operates only on supported, organization-approved AI websites, including ChatGPT, Claude, Gemini, Perplexity, and Grok.

Prompts and supported file attachments are scanned locally in the browser when users attempt to submit content. The extension does not scan general browsing activity or transmit raw prompts, file contents, extracted workbook text, or secret values.

Supported files include secure, browser-only XLSX scanning. Workbook contents are processed locally and are never uploaded for scanning.

Organization policy enforcement

Security teams configure Browser Guardrails in CyBox AI Guardian. Each detection rule can use one of four enforcement actions:

Monitor — allow the submission and record the policy event Warn — require user acknowledgement before proceeding Mask — replace detected sensitive values and verify the sanitized content before submission Block — prevent the prompt or attachment from being submitted

Policy ranking is enforced consistently: Block overrides Mask, Mask overrides Warn, and Warn overrides Monitor.

Built-in detection covers private keys, API keys, passwords, JWTs, connection strings, payment cards, SSNs, national IDs, bulk email addresses, and additional sensitive-data patterns. Organizations can also define custom regular-expression rules for business-specific data.

Privacy by design

Prompt text, file bytes, extracted file content, and raw detected values remain inside the browser.

When a configured policy event occurs, CyBox receives security metadata only, such as the detection type, severity, non-reversible fingerprint, file basename, AI product and domain, timestamp, policy outcome, and relevant user decision.

Unsupported, malformed, encrypted, oversized, timed-out, or otherwise unavailable file scans remain blocked until the attachment is removed.

Enterprise deployment

CyBox AI Guardian is designed for managed security and IT deployments. It supports Chrome Enterprise force installation, managed configuration, organization collector tokens, and attributed Activity Feed events.

Requirements

An active CyBox AI Guardian organization and a valid organization deployment configuration.

Learn more at https://cybox.ai