Lostop

Lostop is a lightweight browser extension that checks what you type into GenAI chat tools — before it's sent. THE PROBLEM Employees paste code, credentials, and confidential text into AI chat tools every day. Once that text is sent, it's gone — no service will delete it from its logs on request. Existing enterprise data-loss prevention tools monitor email and file storage, but rarely inspect what's typed directly into a browser-based chat interface. HOW IT WORKS Lostop watches the input field on supported chat sites. The moment you hit Enter or click Send, your text is checked locally against a set of known secret patterns. If nothing is found, your message goes through as usual. If a secret is detected, the request is blocked, the exact text is highlighted right in the input field, and a notification explains what was found — before anything leaves your browser. WHAT IT CATCHES Lostop recognizes a wide range of developer and business credentials: cloud provider access keys, source-control access tokens, private encryption keys, database connection strings, payment-processor secret keys, service-account credentials, team-chat webhooks and bot tokens, authentication tokens, and card numbers validated with a checksum to avoid false positives. PRIVACY BY DESIGN Lostop checks your text against a companion program running on your own computer. Nothing is sent to a cloud service for scanning — the whole point is to stop your data from leaving in the first place. WHO IT'S FOR Developers who accidentally paste credentials while debugging. Teams handling client or financial data. Anyone who wants a second set of eyes before hitting Send on an AI chat. This is an early-stage, actively developed project. Feedback and bug reports are welcome on our GitHub page.