Discover Shadow IT and warn before sensitive data is pasted into AI tools. All prompt scanning runs on-device.
Users
6
−1 in 30 days
Rating
0.0 / 5
unchanged in 30 days
Ratings
0
0 in 30 days
Store rank
#239K
#200K among extensions
Version
0.2.1
updated 29 Jun 2026
Users
monthly, 4 months
Latest, 15 Oct 2026:6 usersMove the mouse over the chart for any month
Ratings count
monthly, 4 months
Latest, 15 Oct 2026:0 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About Lutril Shadow IT
Lutril DLP — Shadow IT discovery & on-device AI data protection
Lutril helps IT and security teams see which SaaS and AI tools employees use, and stops sensitive data from leaking into AI assistants — without ever reading private content.
What it does
Discovers Shadow IT. Reports the known-SaaS domains employees visit so your team can surface unsanctioned apps that OAuth discovery misses (e.g. email/password signups).
Protects AI prompts. On ChatGPT, Claude, and Gemini, it scans what you type on your device and warns you the moment it detects sensitive data — emails, payment cards, IBANs, API keys, tokens, and other secrets.
Redacts before it's too late. One click replaces detected data with placeholders (e.g. [EMAIL], [API_KEY]) before the prompt is sent — so you keep using AI tools without exposing customer or company data.
Gives admins visibility. A dashboard shows what types of sensitive data are being caught, in which AI tools — so you can measure risk and prove your controls work.
Privacy by design
All detection and redaction happen 100% on your device.
Your prompt text and the detected values never leave your browser.
Only anonymous metadata (the AI tool's domain and the type of data found, e.g. "1 email") is reported — never the content itself.
Built for organizations
Deployed by administrators via Google Workspace or Microsoft Intune. Minimal permissions, no passwords, no general browsing data.