Detection
API keys, tokens, passwords, connection strings, emails, cards, regional IDs, and more — via built-in patterns you can extend on Pro.
Product
Mask at send time. Keep the conversation useful.
OmniShield watches supported AI chat sites, detects secrets and PII, and replaces them before the request leaves your browser.
Before
Summarize this outage and suggest a fix.
OPENAI_API_KEY=sk-live-91x7nA3Pk...
Customer email: anuj@omnishield.app
Stripe token: tok_4Kx8mP0...
After
Summarize this outage and suggest a fix.
OPENAI_API_KEY=[api_key_openai_prod]
Customer email: [email_customer_primary]
Stripe token: [payment_token_checkout]
On-deviceNo prompt upload to OmniShield
Wire-levelRaw secrets never leave the browser
FastProtection happens before send
File awareness
Free scans text uploads (.env, .json, .log). Pro adds on-device OCR for screenshots and images.
Supported sites
ChatGPT, Claude, Google Gemini, Perplexity, and Cursor.
Context-aware masking (Pro)
The biggest Pro difference is not “more redaction” — it is smarter replacement so privacy does not wreck answer quality.
Normal masking
Pattern match → strip or replace with a generic opaque token. Safe, but the model may lose useful structure (“was this a key, a card, or an email?”).
Context-aware masking
Pro chooses format-preserving, role-aware placeholders. The model still sees that a credential-shaped or identity-shaped field existed — never the real value — so guidance stays relevant.
Basic masking
Card
XXXX-XXXX-XXXX-XXXXAPI key
XXXXXXXXXXXXXXXXXXEmail
XXXX@XXXX.XXXPro masking
Card
[visa_card_customer_01]API key
[openai_key_server_prod]Email
[billing_email_primary]Also in Pro
Healthcare patterns, block mode with justification, custom local regex rules, and screenshot OCR — all still on-device.
Enterprise visibility
Teams get the Admin Command Center: telemetry, remote rules, and Chrome Enterprise policy — not bundled into Pro.
One Chrome listing
Install Free from the Store. Unlock Pro with a license key in the same extension — no second download.