Detect and block Shadow AI

A Chrome extension for IT and security teams to monitor unauthorized AI tool usage and prevent sensitive data from leaving the organization.

Deploys in minutes. Runs entirely in the browser. No data sent anywhere.

40+
Detection patterns
24+
AI tools tracked
0
Data sent out

The problem

Shadow AI is a data loss vector

Employees paste confidential data into AI tools daily. API keys, customer records, source code, and credentials end up in third-party systems with no audit trail and no way to revoke access.

Shadow AI - Employees using unauthorized AI tools with company data

Unapproved tools

Employees use ChatGPT, Claude, and others without going through IT or security review

Data pasted in

API keys, customer data, source code, and credentials get pasted into chat windows

Data leaks

Sensitive information ends up in AI training data or third-party logs

Detection

What the extension catches and blocks

Real examples of sensitive data we detect and block before it reaches AI tools

Credit Cards
4111-****-****-1111
Luhn algorithm
API Keys
sk_live_****abc
Pattern match
Private Keys
-----BEGIN RSA-----
Header detection
SSN
***-**-6789
Format check
AWS Keys
AKIA************
Prefix match
Database URLs
postgres://****@...
Connection string

Architecture

Zero data collection

All processing happens locally in Chrome. Nothing is sent to external servers, ever.

Your browser
✓PII detection runs locally
✓Policies stored in chrome.storage.local
✓Audit logs stay on device
✓Works completely offline
External servers
✗No data sent to servers
✗No API calls
✗No telemetry or analytics
✗No account required

Capabilities

Built for security teams

Everything you need to monitor and control AI tool usage across your organization

Visibility into Shadow AI

See which AI tools employees are using across your organization, even unsanctioned ones.

Data loss prevention

Block PII, credentials, API keys, and confidential data before it reaches AI chat interfaces.

60+ detection patterns

Credit cards, SSNs, AWS keys, private keys, JWTs, database URLs, and more. Extensible with custom patterns.

No infrastructure required

Runs entirely in Chrome. No servers to manage, no agents to install, no network changes needed.

Configurable policies

Block specific AI tools, warn users, or allow with logging. Set policies that match your security posture.

Local event logging

All AI visits, blocked attempts, and detections are logged locally. View history in the extension popup.

Dashboard

Monitor activity in real-time

Track AI tool visits, blocked attempts, and sensitive data detections from a single dashboard.

Shadow AI Monitor Dashboard - Real-time activity monitoring

Coverage

24+ AI platforms monitored

Pre-configured detection for all major AI chat tools, coding assistants, and image generators. Add custom domains as needed.

ChatGPT
chat.openai.com
Claude
claude.ai
Google Gemini
gemini.google.com
Microsoft Copilot
copilot.microsoft.com
Perplexity
perplexity.ai
DeepSeek
Blocked by default
Grok / X.AI
x.ai
Poe
poe.com
Mistral Chat
chat.mistral.ai
Cohere
coral.cohere.com
Character.AI
character.ai
You.com
you.com
Pi AI
pi.ai
Jasper
jasper.ai
Copy.ai
copy.ai
Writesonic
writesonic.com
Hugging Face
huggingface.co
Replicate
replicate.com
Together AI
api.together.xyz
Fireworks AI
fireworks.ai
Groq
groq.com
OpenRouter
openrouter.ai
DALL-E
labs.openai.com
Midjourney
midjourney.com

Deployment

Roll out in minutes

Distribute via Chrome policies or manual install. No Chrome Web Store required.

1

Download ZIP

Get the extension package

2

Extract files

Unzip to any folder

3

Open extensions

chrome://extensions

4

Developer mode

Toggle on, top right

5

Load unpacked

Select extracted folder

Deploy to your organization today

Free, open source, and ready for deployment. No vendor lock-in, no data collection, no ongoing costs.

Shadow AI Monitor - Block Sensitive Data from AI Tools | VerifyWise