Penaxtra AI Guardrail by Extuno

On-device DLP for AI. Penaxtra AI Guardrail scans your prompts and file attachments locally and blocks secrets, API keys, payment cards and personal data before they are sent to any AI service. Nothing is sent to us. Free for Chrome and Firefox.

Available on Firefox for Android™

0 (0 reviews)

Download Firefox and get the extension

Download file

Scan the QR code to open this extension in Firefox for Android

About this extension

Penaxtra AI Guardrail is a free, on-device data loss prevention (DLP) tool for anyone who uses AI at work. It watches the box where you type and the files you attach, and it steps in the moment you are about to send something sensitive to an AI service.

Everything is scanned locally in your browser. Your prompts and your files never leave your device, and there is no account to create.

WHAT IT CATCHES
- API keys, cloud credentials and access tokens
- Passwords and database connection strings
- Payment card numbers, national IDs and other personal data, validated with checksums to keep false positives low
- Hidden prompt-injection text and invisible characters
- Unknown secrets, flagged by their randomness

FILES, NOT JUST PROMPTS
Attach a PDF, Word, Excel or text file and it is read on your device and checked before it uploads. Scanned images without a text layer cannot be read.

WHERE IT WORKS
On more than 150 AI chat, search, coding and productivity tools. Administrators can add their own internal AI sites.

YOU CHOOSE WHAT HAPPENS
- Block: warns and lets you send anyway if it is a false positive
- Hard block: stops the message outright, with no override
- Warn: never blocks, just shows a quiet notice
You can also add your own patterns for project code names, internal hostnames or customer IDs.

PRIVATE BY DESIGN
All detection runs in your browser. We never receive your prompt content or your files. Rule updates are delivered as signed data, not remote code. Anonymous usage metrics are off unless you turn them on.

FOR TEAMS
Roll it out with centrally managed deployment, publish your own organisation rules, enforce a policy across the fleet, and see which installs are protected. Enterprise deployment: info@penaxtra.com

This is a strong, best-effort control, not a guarantee. Detection can be incomplete, and you remain responsible for what you choose to share. Full privacy details: https://penaxtra.com/browser-extension/privacy

Developer comments

All scanning is performed locally in the browser. Prompt and file contents are never transmitted. The extension only downloads signed detection rules and, optionally, sends anonymous aggregate usage counts (telemetry is off by default). All UI is built with DOM APIs; no remote code is loaded or executed.

Rated 0 by 0 reviewers

Permissions and data

Required permissions:

Display notifications to you
Access your data for sites in the chatgpt.com domain
Access your data for sites in the chat.openai.com domain
Access your data for sites in the claude.ai domain
Access your data for sites in the gemini.google.com domain
Access your data for sites in the aistudio.google.com domain
Access your data for sites in the copilot.microsoft.com domain
Access your data for sites in the perplexity.ai domain
Access your data for sites in the poe.com domain
Access your data for sites in the grok.com domain
Access your data for sites in the x.com domain
Access your data for sites in the meta.ai domain
Access your data for sites in the chat.mistral.ai domain
Access your data for sites in the chat.deepseek.com domain
Access your data for sites in the chat.qwen.ai domain
Access your data for sites in the tongyi.aliyun.com domain
Access your data for sites in the kimi.com domain
Access your data for sites in the kimi.moonshot.cn domain
Access your data for sites in the doubao.com domain
Access your data for sites in the yiyan.baidu.com domain
Access your data for sites in the chatglm.cn domain
Access your data for sites in the yuanbao.tencent.com domain
Access your data for sites in the huggingface.co domain
Access your data for sites in the you.com domain
Access your data for sites in the phind.com domain
Access your data for sites in the character.ai domain
Access your data for sites in the pi.ai domain
Access your data for sites in the lmarena.ai domain
Access your data for sites in the venice.ai domain
Access your data for sites in the bing.com domain
Access your data for sites in the search.brave.com domain
Access your data for sites in the andisearch.com domain
Access your data for sites in the komo.ai domain
Access your data for sites in the felo.ai domain
Access your data for sites in the iask.ai domain
Access your data for sites in the genspark.ai domain
Access your data for sites in the exa.ai domain
Access your data for sites in the m365.cloud.microsoft domain
Access your data for sites in the copilot.cloud.microsoft domain
Access your data for sites in the office.com domain
Access your data for sites in the outlook.office.com domain
Access your data for sites in the outlook.office365.com domain
Access your data for sites in the teams.microsoft.com domain
Access your data for sites in the sharepoint.com domain
Access your data for sites in the officeapps.live.com domain
Access your data for sites in the github.com domain
Access your data for sites in the docs.google.com domain
Access your data for sites in the mail.google.com domain
Access your data for sites in the notion.so domain
Access your data for sites in the slack.com domain
Access your data for sites in the salesforce.com domain
Access your data for sites in the lightning.force.com domain
Access your data for sites in the glean.com domain
Access your data for sites in the writer.com domain
Access your data for sites in the jasper.ai domain
Access your data for sites in the grammarly.com domain
Access your data for sites in the atlassian.net domain
Access your data for sites in the hubspot.com domain
Access your data for sites in the intercom.com domain
Access your data for sites in the zendesk.com domain
Access your data for sites in the coda.io domain
Access your data for sites in the gamma.app domain
Access your data for sites in the replit.com domain
Access your data for sites in the v0.dev domain
Access your data for sites in the v0.app domain
Access your data for sites in the bolt.new domain
Access your data for sites in the lovable.dev domain
Access your data for sites in the codeium.com domain
Access your data for sites in the windsurf.com domain
Access your data for sites in the sourcegraph.com domain
Access your data for sites in the github.dev domain
Access your data for sites in the vscode.dev domain
Access your data for sites in the gitpod.io domain
Access your data for sites in the codesandbox.io domain
Access your data for sites in the stackblitz.com domain
Access your data for sites in the deepnote.com domain
Access your data for sites in the colab.research.google.com domain
Access your data for sites in the blackbox.ai domain
Access your data for sites in the trae.ai domain
Access your data for sites in the platform.openai.com domain
Access your data for sites in the console.anthropic.com domain
Access your data for sites in the console.mistral.ai domain
Access your data for sites in the console.groq.com domain
Access your data for sites in the groq.com domain
Access your data for sites in the dashboard.cohere.com domain
Access your data for sites in the replicate.com domain
Access your data for sites in the openrouter.ai domain
Access your data for sites in the fireworks.ai domain
Access your data for sites in the together.ai domain
Access your data for sites in the smith.langchain.com domain
Access your data for sites in the midjourney.com domain
Access your data for sites in the leonardo.ai domain
Access your data for sites in the firefly.adobe.com domain
Access your data for sites in the runwayml.com domain
Access your data for sites in the pika.art domain
Access your data for sites in the ideogram.ai domain
Access your data for sites in the krea.ai domain
Access your data for sites in the suno.com domain
Access your data for sites in the elevenlabs.io domain
Access your data for sites in the heygen.com domain
Access your data for sites in the lumalabs.ai domain
Access your data for sites in the otter.ai domain
Access your data for sites in the fireflies.ai domain
Access your data for sites in the fathom.video domain
Access your data for sites in the tldv.io domain
Access your data for sites in the read.ai domain
Access your data for sites in the clova-x.naver.com domain
Access your data for sites in the aleph-alpha.com domain
Access your data for sites in the giga.chat domain
Access your data for chatgpt.com
Access your data for chat.openai.com
Access your data for claude.ai
Access your data for gemini.google.com
Access your data for aistudio.google.com
Access your data for copilot.microsoft.com
Access your data for perplexity.ai
Access your data for poe.com
Access your data for grok.com
Access your data for x.com
Access your data for meta.ai
Access your data for chat.mistral.ai
Access your data for chat.deepseek.com
Access your data for chat.qwen.ai
Access your data for tongyi.aliyun.com
Access your data for kimi.com
Access your data for kimi.moonshot.cn
Access your data for doubao.com
Access your data for yiyan.baidu.com
Access your data for chatglm.cn
Access your data for yuanbao.tencent.com
Access your data for huggingface.co
Access your data for you.com
Access your data for phind.com
Access your data for character.ai
Access your data for pi.ai
Access your data for lmarena.ai
Access your data for venice.ai
Access your data for bing.com
Access your data for search.brave.com
Access your data for andisearch.com
Access your data for komo.ai
Access your data for felo.ai
Access your data for iask.ai
Access your data for genspark.ai
Access your data for exa.ai
Access your data for m365.cloud.microsoft
Access your data for copilot.cloud.microsoft
Access your data for office.com
Access your data for outlook.office.com
Access your data for outlook.office365.com
Access your data for teams.microsoft.com
Access your data for sharepoint.com
Access your data for officeapps.live.com
Access your data for github.com
Access your data for docs.google.com
Access your data for mail.google.com
Access your data for notion.so
Access your data for slack.com
Access your data for salesforce.com
Access your data for lightning.force.com
Access your data for glean.com
Access your data for writer.com
Access your data for jasper.ai
Access your data for grammarly.com
Access your data for atlassian.net
Access your data for hubspot.com
Access your data for intercom.com
Access your data for zendesk.com
Access your data for coda.io
Access your data for gamma.app
Access your data for replit.com
Access your data for v0.dev
Access your data for v0.app
Access your data for bolt.new
Access your data for lovable.dev
Access your data for codeium.com
Access your data for windsurf.com
Access your data for sourcegraph.com
Access your data for github.dev
Access your data for vscode.dev
Access your data for gitpod.io
Access your data for codesandbox.io
Access your data for stackblitz.com
Access your data for deepnote.com
Access your data for colab.research.google.com
Access your data for blackbox.ai
Access your data for trae.ai
Access your data for platform.openai.com
Access your data for console.anthropic.com
Access your data for console.mistral.ai
Access your data for console.groq.com
Access your data for groq.com
Access your data for dashboard.cohere.com
Access your data for replicate.com
Access your data for openrouter.ai
Access your data for fireworks.ai
Access your data for together.ai
Access your data for smith.langchain.com
Access your data for midjourney.com
Access your data for leonardo.ai
Access your data for firefly.adobe.com
Access your data for runwayml.com
Access your data for pika.art
Access your data for ideogram.ai
Access your data for krea.ai
Access your data for suno.com
Access your data for elevenlabs.io
Access your data for heygen.com
Access your data for lumalabs.ai
Access your data for otter.ai
Access your data for fireflies.ai
Access your data for fathom.video
Access your data for tldv.io
Access your data for read.ai
Access your data for clova-x.naver.com
Access your data for aleph-alpha.com
Access your data for giga.chat

Optional permissions:

Access your data for all websites

Data collection:

The developer says this extension doesn't require data collection.

Optional data collection, according to the developer:

Technical and interaction data