The problemThe risk sits in the moment someone types, pastes or clicks.
AI is now part of every workday, and every scam. Most security tools watch files and network traffic, so they miss that moment. Four risks pass through the same laptop or phone.
01Company data pasted into AI tools
AI data loss preventionSource code, customer records and passwords typed or pasted into AI chat tools.
02Hidden instructions that hijack AI assistants
Prompt injectionPages, files and tools carry instructions that take over AI assistants and agents.
03AI apps nobody approved
Shadow AI discoveryTeams adopt AI and SaaS apps faster than IT can review or approve them.
04Scams written by AI
Phishing and payment fraudFake invoices, phishing and impersonation arriving by email and WhatsApp.
How it works
Checked on the device, in five steps.
01You act
Paste a prompt, upload a file, open a link or commit code.
02We intercept
At the point of action, before anything is sent.
03The engine decides
Three layers check it, all on the device.
04We act
Allow, redact, warn or block, as your policy says.
05We record
Dashboard, security score and audit trail.
Inside step 03: three layers decide
Rules
Pattern matchingKnown patterns such as API keys and card numbers, matched instantly.
Machine learning
ML classifierCatches fuzzy and new threats in about 10 ms (internal testing).
Local AI model
On-device LLM firewallReasons about disguised prompt attacks, offline.
Where it runs
Five places people work. One engine.
| Runs as | On | Covers |
|---|
| Browser extension | Chrome, Edge, Firefox | AI tools, websites, Gmail, WhatsApp Web |
| Web dashboard | Any browser | Live feed, rules, audit log, security score |
| Desktop app | Windows, macOS, Linux | Clipboard and alerts across every app |
| Code editor | VS Code | Code checked as you type; risky commits blocked |
| Network proxy | System-wide | Every app, with no per-app setup |
For organisationsAdopt AI with controls and an audit trail.
Best fit for tech companies, regulated industries, IT services and any team using AI. The same protection also covers individuals at home, where scams and fake payment requests land on the same device.
Govern AI use
Shadow AI discoverySee which AI and SaaS apps are in use, and set a policy for each.
Stop data leaks
Secret and PII redactionSecrets, personal data and IP redacted or blocked across 40+ AI tools.
Protect developers
VS Code scanning · commit protectionCode checked in VS Code; commits containing secrets blocked.
Shield finance and HR
Email and WhatsApp scam analysisScam and fraud detection in email and WhatsApp for high-risk teams.
Deploy and prove
GPO · MDM · Intune · SSO · audit logManaged rollout, tamper protection, single sign-on and a full audit trail.
Proof of conceptFour weeks from scope to a yes-or-no decision.
We start in warn-only mode with a small pilot group, then measure what was caught against criteria you set.
Week 0Scope
Agree goals and success criteria, pick the pilot users, name a sponsor.
Week 1Deploy
Roll out the extension, desktop app and VS Code in warn-only mode.
Weeks 2–3Run
Watch live activity, tune rules each week, test blocking with one team.
Week 4Review
Findings report, results against your criteria, and a rollout plan.
Run a CyberShield proof of concept with your team.
Pick “AI data leaks and scams (CyberShield)” in the pilot form and we will scope it with you.
Other Ametriq products
For teams shipping AI apps and agentsAI runtime securityAIGuard
Checks every AI request and agent action before it runs, and blocks or holds the risky ones.- Stops attempts to trick your AI into breaking its rules
- Limits each agent to the actions it is allowed to take
- Records every decision as audit evidence
For security operations teamsAgentic SecOpsSpectra
Turns hundreds of security alerts into a short list of cases, each with a named owner.- Related alerts grouped into one case
- Every case has an owner
- Nothing changes without a person approving it