Free
$0forever
For developers working with AI who protect their workstation.
- API keys
- Bearer & JWT tokens
- AWS, GitHub keys
- Private keys (PEM)
- Crypto wallets
- IBAN
Protect your secrets from AI agents
One AI request can send your secrets outside your machine
AI sees too much. LocalGuard hides what shouldn't end up in logs, context windows or vendor metrics. Works with any AI agent — from Claude and ChatGPT to your own API integrations.
API keys, Bearer & JWT tokens, AWS keys, GitHub tokens, private keys (PEM), crypto wallets, IBAN — all protected in the free tier.
50+
detection patterns
<50ms
added latency per request
100%
local processing
This dashboard screenshot comes from a live proxy run with real secrets intercepted in real time.
The Real Risk
One careless AI request can cost you everything
Every day, developers and teams accidentally send sensitive data to LLM providers. The consequences are real and immediate.
API Keys & Tokens Leaked
One pasted error log can expose your OpenAI, AWS, or Stripe keys. Once sent, you lose control over who can access that data.
Financial Data Exposed
Credit card numbers, IBAN codes, and crypto wallet addresses in chats, logs, and AI requests are transmitted to and stored by LLM providers — often with retention policies you don't control.
Personal Data of Clients
Names, emails, phone numbers, and addresses from databases and logs that you paste into AI chats or analysis requests. GDPR violations, trust loss.
Passwords & Private Keys
Database passwords, SSH keys, JWT tokens, Bearer tokens in code snippets you ask AI to debug.
Simple Solution
Install once. Protect every request.
LocalGuard sits between your tools and LLM providers. It masks sensitive data before sending and restores it when the response comes back. You work as usual — but your secrets never leave your machine.
Without protection
"Fix this code: conn = psycopg2.connect(host='db.acme.io', password='Sup3rS3cret!', user='admin') and send email to john.doe@acme-corp.com using key sk-proj-abc123xyz789"
With LocalGuard
"Fix this code: conn = psycopg2.connect(host='db.acme.io', password='<REDACTED:password_in_text:1>', user='admin') and send email to <REDACTED:email:1> using key <REDACTED:api_key:1>"
See It In Action
Real protection. Real numbers.
Here is what LocalGuard catches in a real work session with Codex and Claude Code.
669
secrets intercepted
138
requests scanned
70%+
of requests contained secrets
109 MB
of data analyzed
Measured in a real local development session
The metrics above and the screenshots below come from the same proxy run. Tap any image to inspect the full-size evidence.
50+ Detection Patterns
Everything that shouldn't leave your machine
Two-stage detection: fast regex patterns + optional ONNX AI model for names, locations, and context-aware entities.
API KeysFree
AWS KeysFree
Credit CardsPro
EmailPro
Phone NumbersPro
PasswordsPro
JWT TokensFree
Bearer TokensFree
Private KeysFree
IBANFree
Crypto WalletsFree
Personal NamesPro
LocationsPro
Passwords in URLsPro
GitHub TokensFree
and 17+ more
Items marked "Free" work without a license. "Pro" items require a paid license.
Why LocalGuard
Built by security specialists, not just developers
LocalGuard was built by people who worked on large banking systems and business-critical software. They understand what confidential data means in everyday life, what happens when it leaks, and why protection has to work before a request ever leaves your machine.
100% local, zero telemetry
Your data never leaves your machine for scanning. No cloud, no analytics, no third-party servers. Everything runs on your hardware under your control.
Used where business data matters
LocalGuard has already been used to protect business staff who work with confidential operational, client, and financial information every day.
Built in Rust for speed and safety
The Rust core keeps scanning fast, predictable and light on resources. Sensitive data is processed and stored on the same machine where the work happens — nowhere else.
Pricing
Most Popular
Pro
$39per year
≈ $3.25/month · billed once a year
For those processing real client data.
Everything in Free, plus:
- Credit cards
- Emails
- Phone numbers
- Passwords
- Personal data
- Real-time dashboard
Enterprise
Customcontact us
For teams with server deployments and data policies.
Everything in Pro, plus:
- 2 server licenses
- Extended detection rules
- AI tuning
- Priority support
FAQ
Common questions
Does it really mask data before it leaves my computer?
Yes. The proxy runs locally on your machine, intercepts HTTP requests and strips sensitive data before they reach LLM providers.
Will it slow down my workflow?
No. Regex scanning takes under 50ms per request, including the optional AI model. You won't notice any difference.
Does it work with Claude Code, Cursor, Copilot?
Yes. Any tool that sends HTTP requests to an LLM API can be protected. Just change the API endpoint to point through the local proxy.
Can LLMs still understand redacted requests?
Absolutely. Placeholders like <REDACTED:email:1> preserve the semantic structure. The LLM knows there was an email there, it just doesn't see the actual address.
Is my data sent anywhere for scanning?
No. Everything runs locally on your machine. No cloud services, no telemetry, no data leaves your computer for analysis.
Can I audit the source code?
The source code is closed, but for enterprise customers we work with security experts and provide everything they need for an independent review.
I'm careful when I work with AI. Why do I need this?
The screenshots on this page come from a real local session where secrets appeared in more than 70% of requests. Even careful users paste error logs, stack traces, and config fragments under pressure. Automation catches what attention misses.
Is the free version enough for everyday use?
For most individual developers — yes. The free tier detects and redacts API keys, tokens, private keys, crypto wallets, and IBAN codes. If you also need password, credit card, email, phone, or AI-powered name/location detection, upgrade to a paid license.
I lost my license file. How do I recover it?
If your machine fingerprint hasn't changed, open LocalGuard, copy the fingerprint from the License panel, then go to Recover and paste it there. You'll get a freshly signed license key for that machine — paste it back into LocalGuard's Activate License field. The original expiry date is preserved. If your fingerprint did change (e.g. hardware swap or major OS update), you'll need to buy a new license.
What's the difference between Enterprise and Pro?
Free and Pro are designed for a single user on a single machine. Enterprise lets you run the proxy on your organization's servers and grant simultaneous access to many employees without installing the app on every workstation — so you can enforce security policy on LLM-bound data company-wide.
Is your next AI request safe?
Start free — API keys, tokens, and crypto detection included. Download in 2 minutes, no license needed. Upgrade anytime for passwords, credit cards, PII, and AI model.
macOS, Linux, Windows.