Hx0 DateGuard

Hx0 DataGuard is a local security assistant that runs directly in your browser. It is designed for everyday work, development and testing, and authorized security self-assessment. It helps you scan web pages for sensitive information and exposed API paths, detect potential data leaks before content is submitted to AI tools, forms, or chat boxes, and analyze webmail or local EML files for phishing risks—all without uploading page content or email bodies to our servers. Sensitive Data Detection Scan the current page’s DOM, inline scripts, external JavaScript files, and comments to identify potentially exposed sensitive data, including: API keys, tokens, secrets, and connection information Phone numbers, identity numbers, and other personal data Test accounts, internal addresses, and debugging information Other sensitive content matched by enabled detection rules Results are organized in the browser sidebar with matched locations and surrounding context for manual review. API Path Discovery Extract API paths, webhooks, internal addresses, administrative endpoints, and other interface clues from web pages and external scripts. Within an authorized testing scope, discovered paths can be further verified and included in exported scan reports. Input Leak Prevention Monitor text entered or pasted into AI chat boxes, workplace applications, web forms, and other browser input fields. Potentially sensitive content is detected before it is submitted. Supported capabilities include: Input and send monitoring: Detect sensitive content while typing and perform another check before submission Clipboard paste monitoring: Review clipboard content before it is pasted, with a separate on/off switch Alert or block: Display a warning or prevent submission according to rule settings Detection levels: Choose Light Alert, Standard, or Strong Blocking mode Site whitelist and Do Not Disturb: Reduce unnecessary alerts on trusted websites Hx0 DataGuard is optimized for common AI and workplace scenarios while also supporting most standard web input fields. Login pages are generally excluded from input monitoring. Phishing Email Detection Analyze opened webmail messages, downloaded EML files, or manually imported local EML files entirely offline. The analysis can help identify: Sender identity and email authentication information Differences between displayed links and actual destinations Lookalike domains and social engineering language Attachments, MIME structure, and email delivery paths Tracking pixels, suspicious links, and other risk indicators Reports include a risk score, key evidence, link and attachment details, IOC classifications, and recommended response actions. The risk score is intended only to assist investigation and does not represent the probability that an email is malicious. Webmail analysis may be limited by the page structure. For more complete results, importing the original EML file is recommended. Rule Center Hx0 DataGuard includes approximately 130 built-in sensitive-data detection rules and supports: Enabling or disabling rules by category Creating custom detection rules Configuring individual rules to alert or block Importing and exporting rule configurations Adjusting the detection scope for different business or team requirements Report Export Scan and analysis results can be exported in the following formats: HTML Markdown JSON Reports can be used for security self-assessment, issue archiving, internal reporting, and remediation follow-up. Local-First Privacy Hx0 DataGuard follows a local-first processing model: Page and script scans run locally Input content is inspected within the browser Email bodies and attachment information are analyzed locally Scan records and reports are stored on the current device by default No cloud AI service is used for email analysis Page content and email bodies are not uploaded to our servers No account registration is required to get started. Typical Use Cases Check logs, configuration files, or business data before pasting them into an AI assistant Detect exposed secrets, API endpoints, and test data before a website is released Review API paths found in pages and scripts within an authorized testing scope Extract and review risk evidence from suspicious emails without using cloud services Export results for developers, operations teams, or security personnel to review Important Notice Hx0 DataGuard is intended only for authorized testing, security self-assessment, and assisted analysis. It does not replace professional penetration testing, source-code auditing, an enterprise email security gateway, or a formal compliance assessment. Detection and analysis results may contain false positives or false negatives. Always verify findings using the original data, relevant business context, and official communication channels. New users receive one day of trial VIP access after installation, with all features available during the trial period.