Skip to main content
Get StartedOverviewPricingProofsIntegrations

AI tools leak your data. Shield catches it before it leaves your machine.

Every time you use Claude Code, Cursor, Copilot, or any AI tool, sensitive information can slip into the prompt. API keys, .env files, database credentials, customer records, sent to external servers you don't control. Shield installs on your machine and catches it automatically, on every call, without anyone remembering to sanitise a prompt.

Detection is pattern-based and scoped to the filter packs you run: a tight net, tuned to your data, not a guarantee that nothing ever slips. What it matches is replaced before the request leaves, and every match is logged as evidence.

No cloud service. One install, every AI tool on that machine is protected. Subscribe to the app from $49.99/mo, or own the source outright with a scoped engagement.

Free 7-day trial. No card, no signup

Every tier, every feature. The download is the trial.

By Purfect Labs · Runs on your machine

For developers, dev shops, SaaS teams, and AI enthusiasts. Subscribe to the app, or own the source outright.

Tokenizing outbound.
Rehydrate inbound.

Shield is a transparent redaction gateway that sits in front of every LLM tool your team uses. The secrets and PII your filter packs match are replaced with placeholders outbound, then rehydrated inbound, so the model provider never receives those matched values in cleartext.

No hosted service. Source-delivered tiers: no license server, no subscription. You own the source.

Flat, scoped engagements. No per-seat or per-token meter, no usage billing.

The leak surface

Your team uses AI every day, ChatGPT for drafting, Copilot for coding, Claude for analysis, Notion AI for notes. And every day someone accidentally includes customer data, financials, or internal documents in a prompt. The AI provider stores it. Your compliance team can't see it. Your security team can't stop it.

Cloud credentials
AWS_ACCESS_KEY_ID, GCP service-account JSON
Source-control tokens
ghp_..., GitLab PATs, gho_...
API keys
sk-ant-..., sk-..., internal service tokens
Environment secrets
.env contents read into context by a tool
Database credentials
Postgres / Mongo connection strings
JWTs
eyJ... tokens in headers, args, fixture files
Domain PII
SSNs, patient names, DOBs, card PANs
Tool exfiltration
Tool trying to read ~/.ssh/, ~/.aws/, /etc/shadow

Asking your team to manually sanitize every prompt is asking them to stop shipping.

How we engage

We work with your team, whether that's your CTO, compliance officer, IT director, or department head. If your organization is adopting AI and worried about what's leaking, we deploy with whoever owns that risk. Engineering handles the technical install; leadership gets the compliance evidence. Everyone stays in their lane.

What the model saw
[REDACTED:AWS_KEY_001]
[REDACTED:PHI_NAME_001]
[REDACTED:JWT_001]
...sanitized payload

Redacted tokens. Sanitized payloads. Matched PHI never sent in the clear.

What your developer saw
AKIA2X9...REAL_KEY
Sarah Johnson
eyJhbGci...full_token
...full response

Real values. Full responses. Nothing hidden from the developer.

Belt and suspenders, plugin catches obvious leaks at the agent-loop boundary, gateway scrubs the wire. If one layer misses, the other catches.

Two ways to run Shield

Own the source outright, or subscribe to the app. Same binary either way.

Self-serve: download, subscribe, done. No engagement, no scoping call. Every tier runs free for 7 days. No card, no signup.

Anonymous download. 7-day full-feature trial, no card, no signup. The trial clock runs on your machine; the only server record is a deletable anonymous usage counter.

Shield Core
$49.99/mo per seat $55.54
per seat · up to 6 seats
Monthly$49.99/mo Save 10%
Yearly$479.90/yr Save 20%
  • ✓Tokenizing proxy for every covered tool
  • ✓Secrets & PII filter packs
  • ✓Codex, OpenAI, Hermes, Claude Code & CLI coverage
  • ✓Local tamper-evident audit log
  • ✓Anonymous trial: no account, no card
or start the 7-day free trial first
Shield Pro
$79.99/mo per seat $94.11
per seat · up to 6 seats
Monthly$79.99/mo Save 15%
Yearly$767.90/yr Save 20%
  • ✓Everything in Core
  • ✓Audit dashboard with per-tool visibility
  • ✓Custom filter packs for your domain
  • ✓Evidence export for SOC 2 / HIPAA programs
  • ✓License panel with self-serve data deletion
or start the 7-day free trial first
Shield Max
$99.99/mo per seat $124.99
per seat · up to 6 seats
Monthly$99.99/mo Save 20%
Yearly$959.90/yr Save 20%
  • ✓Everything in Pro
  • ✓IQ beta: AI-assisted detection filters
  • ✓Managed configs (MDM) for fleet rollout
  • ✓Team enforcement policies
  • ✓Priority support
or start the 7-day free trial first
Closed beta · Request access to Shield

One email when the app ships. No newsletter.

The Platform · what extends the app

Shield ships as one binary. The platform is what that binary grows into as you move up the tiers, Go interfaces, not registries. Compile-time safety, not runtime plugins.

Plugin system
Go interfaces as extension points: FilterHook, DashboardHook, ProxyHook, TelemetryHook, SettingsHook. Compile-time safety, no registry, no init().
Supervisor + circuit breaker
One lifecycle: StartAll, StopAll, Reload. Fail-open degrade with exponential backoff; three failures open the circuit.
Federated dashboard
S3 federation. Every host ships events to your bucket, your keys. Org-wide view, drill by host, user, team.
Audit system
Hash-chained, encrypted JSONL. Every redaction becomes tamper-evident evidence. SOC 2 and HIPAA exports, one command.
GPU orchestration
Provision defense models on your cloud (Linode today). Semantic scoring that catches what regex can't, with zero data leaving your network.
RemoteFilter + EntityTable
Custom-tier semantic layer. Multilingual named-entity recognition and linkage: a codebook, not a vector index. Redacts on the wire, role-preserving.
🔒

Your data never touches our infrastructure

The gateway runs on your network. The audit log writes to your S3 with your encryption keys under your retention policy. There is no Shield cloud. There is no telemetry. Audit teams query their existing pipeline.

SOC 2 evidence readyHIPAA audit trailYour S3 + your keysAppend-only logZero telemetrySource code delivered
Intake Portal

Let’s Build.

Submit your technical details and we will formulate a production scope, architectural dependencies, and exact model selection profiles.

Prefer a call instead?

Frequently Asked Questions

Everything you need to know about Shield

Do you have SOC 2?

SOC 2 is not applicable by architecture. We hold no keys, run no servers, process no data. Shield runs entirely on your infrastructure. See our architecture letter for details.

How much does it cost?

Flat and scoped per engagement, no per-seat or per-token meter. Two PO line items. Custom engagements scoped to your requirements. No subscription, no renewal fees, no hidden costs.

Can we try before buying?

Yes. We run a live demo on YOUR LLM flow, in YOUR environment, with YOUR prompt shapes. It's a working gateway, not a slide deck. You see real redaction on real prompts before committing.