Product

Mask at send time. Keep the conversation useful.

OmniShield watches supported AI chat sites, detects secrets and PII, and replaces them before the request leaves your browser.

OmniShield masking demonstration: secrets replaced before the message is sent
Wire-level protection: what you type is not what the provider receives.

Detection

API keys, tokens, passwords, connection strings, emails, cards, regional IDs, and more — via built-in patterns you can extend on Pro.

File awareness

Free scans text uploads (.env, .json, .log). Pro adds on-device OCR for screenshots and images.

Supported sites

ChatGPT, Claude, Google Gemini, Perplexity, and Cursor.

Context-aware masking (Pro)

The biggest Pro difference is not “more redaction” — it is smarter replacement so privacy does not wreck answer quality.

Normal masking

Pattern match → strip or replace with a generic opaque token. Safe, but the model may lose useful structure (“was this a key, a card, or an email?”).

Context-aware masking

Pro chooses format-preserving, role-aware placeholders. The model still sees that a credential-shaped or identity-shaped field existed — never the real value — so guidance stays relevant.

Diagram comparing basic masking to Pro context-aware masking
Pro context-aware masking preserves shape and intent without leaking the underlying secret.

Also in Pro

Healthcare patterns, block mode with justification, custom local regex rules, and screenshot OCR — all still on-device.

Enterprise visibility

Teams get the Admin Command Center: telemetry, remote rules, and Chrome Enterprise policy — not bundled into Pro.

One Chrome listing

Install Free from the Store. Unlock Pro with a license key in the same extension — no second download.