ThreatVec Shadow AI

ThreatVec Shadow AI is the browser-side companion to the ThreatVec AI-security platform. It shows which AI services your team actually uses, and warns on sensitive data before it's pasted into an AI tool — with all detection performed on-device. What it does • Discovers shadow-AI use across 554 known AI services — including ChatGPT, Claude, Gemini, Perplexity, and Copilot, plus many you may not know are in use. • Scans typed and pasted text on-device for sensitive data such as SSNs, credit cards, and API keys — and warns you before it leaves the browser for an AI tool. • Reports discovery and warning events to your own ThreatVec tenant for board-pack reporting — the data-type name (e.g. "credit card") and the AI-service domain only. Assurance, not enforcement ThreatVec tests and attests; it does not inline-block. When a site is off-policy the extension surfaces a warning and, best-effort, redirects to an informational page — it never hard-blocks your browser, and it routes the signal to your security team. Your privacy is the design • Detection is 100% on-device. Your prompt content and the sensitive values themselves never leave the browser. • Only the data-type names and the AI-service domain are sent — to your configured ThreatVec tenant, never a generic upstream. • Does nothing until configured with your tenant. Part of the ThreatVec platform. Learn more at https://threatvec.com.