Skip to main content
Shield · LLM Security Gateway & Platform

Tokenizing outbound.
Rehydrate inbound.

Shield sits in front of every AI tool your team uses and replaces the secrets and PII its filter packs match with placeholders, outbound, before they leave your company, then rehydrated inbound so your developers never notice.

AI Coding Tool Security · Secret Leak Prevention · Audit-Ready by Design

Building security infrastructure for AI-native teams.

See how it works Get Started
The platform · source-deliveredThe app · subscribe, self-serve
The App

One binary. One config. Every tool covered.

Shield runs on your machine, not ours. The gateway, the CLI, the dashboard, the audit log: all one binary. No hosted service. No data pipeline.

One install, every tool
One local gateway. Plugins auto-install for the LLM CLIs your team already uses, Claude Code, Codex, Cursor, DeepSeek, Ollama.
Transparent redaction
Secrets and PII your packs match become placeholders outbound, then rehydrate inbound. The provider never sees the real value; the developer never notices.
Belt and suspenders
The plugin catches obvious leaks at the agent-loop boundary; the gateway scrubs the wire. If one layer misses, the other catches.
Desktop coverage
Claude Desktop, Cursor, VS Code Copilot, Zed, Continue, routed through the gateway with backup, restore, and health checks per app.
What the model saw
[REDACTED:AWS_KEY_001]
[REDACTED:PHI_NAME_001]
[REDACTED:JWT_001]
...sanitized payload

Redacted tokens. Sanitized payloads. Matched PHI never sent in the clear.

What your developer saw
AKIA2X9...REAL_KEY
Sarah Johnson
eyJhbGci...full_token
...full response

Real values. Full responses. Nothing hidden from the developer.

Platform Capabilities

Built the way you'd build it.

Go interfaces, not registries. Compile-time safety, not runtime plugins. The platform extends the app. It doesn't replace it.

Plugin system
Go interfaces as extension points: FilterHook, DashboardHook, ProxyHook, TelemetryHook, SettingsHook. Compile-time safety, no registry, no init().
Supervisor + circuit breaker
One lifecycle: StartAll, StopAll, Reload. Fail-open degrade with exponential backoff; three failures open the circuit. Dashboard shows green / yellow / red.
Federated dashboard
S3 federation. Every host ships events to your bucket, your keys. Org-wide view, drill by host, user, team. Local-only or federated, your call.
Audit system
Hash-chained, encrypted JSONL. Every redaction becomes tamper-evident evidence. SOC 2 and HIPAA exports, one command.
GPU orchestration
Provision defense models on your cloud (Linode today, more to come). Semantic scoring that catches what regex can't, with zero data leaving your network.
RemoteFilter + EntityTable
Custom-tier semantic layer. Multilingual named-entity recognition and linkage: a codebook, not a vector index. Redacts on the wire, role-preserving.
Full Shield details
Pricing

Two ways to run Shield

Own the source outright, or subscribe to the app. Same binary either way.

Self-serve: download, subscribe, done. No engagement, no scoping call. Every tier runs free for 7 days. No card, no signup.

Anonymous download. 7-day full-feature trial, no card, no signup. The trial clock runs on your machine; the only server record is a deletable anonymous usage counter.

Shield Core
$49.99/mo per seat $55.54
per seat · up to 6 seats
Monthly$49.99/mo Save 10%
Yearly$479.90/yr Save 20%
  • ✓Tokenizing proxy for every covered tool
  • ✓Secrets & PII filter packs
  • ✓Codex, OpenAI, Hermes, Claude Code & CLI coverage
  • ✓Local tamper-evident audit log
  • ✓Anonymous trial: no account, no card
or start the 7-day free trial first
Shield Pro
$79.99/mo per seat $94.11
per seat · up to 6 seats
Monthly$79.99/mo Save 15%
Yearly$767.90/yr Save 20%
  • ✓Everything in Core
  • ✓Audit dashboard with per-tool visibility
  • ✓Custom filter packs for your domain
  • ✓Evidence export for SOC 2 / HIPAA programs
  • ✓License panel with self-serve data deletion
or start the 7-day free trial first
Shield Max
$99.99/mo per seat $124.99
per seat · up to 6 seats
Monthly$99.99/mo Save 20%
Yearly$959.90/yr Save 20%
  • ✓Everything in Pro
  • ✓IQ beta: AI-assisted detection filters
  • ✓Managed configs (MDM) for fleet rollout
  • ✓Team enforcement policies
  • ✓Priority support
or start the 7-day free trial first
Closed beta · Request access to Shield

One email when the app ships. No newsletter.

Intake Portal

Let’s Build.

Submit your technical details and we will formulate a production scope, architectural dependencies, and exact model selection profiles.