Kasbah is a browser extension that locally scans text before it is sent to AI tools, blocking API keys, credentials, credit cards, and other sensitive data from leaving the user’s device. Detection runs entirely in the browser using regex, entropy scoring, and machine‑learning classifiers, and it alerts or blocks the content with silent, toast, or modal warnings depending on risk level.
Funding
Funding not disclosed
Founders
Product
Problem
Users frequently paste sensitive information such as API keys, database credentials, credit card numbers, and private keys into AI chat interfaces, risking accidental exposure because the content is sent to remote servers without any local safeguard.
Solution
Kasbah offers a browser extension that monitors user interactions with AI tools (e.g., ChatGPT, Claude, Gemini) and detects high‑risk data before it is transmitted. The detection engine runs entirely in the user's browser, employing regular expressions, entropy scoring, and machine‑learning classifiers to identify secrets. Depending on the risk level, the extension either remains silent, shows a toast warning, or blocks the submission with a modal that reveals the detected content. Because all analysis is performed locally, no user data ever reaches Kasbah's servers, preserving privacy while preventing accidental leaks.
Target Audience
Primary users are developers, consultants, freelancers, and enterprise teams who regularly interact with AI chat tools and need to protect credentials, proprietary data, and personally identifiable information.
Features
- Real‑time scanning of typed, pasted, uploaded, edited, browsed, and downloaded content within supported AI web apps
- Multi‑layer detection using regex patterns, entropy analysis, and ML classifiers for API keys, cloud credentials, database URLs, credit cards, private keys, government IDs, JWT/OAuth tokens, and environment variables
- Tiered risk responses: silent pass‑through for low risk, non‑intrusive toast alerts for medium risk, and modal blocking for high‑risk data
- Zero‑knowledge architecture: all processing occurs locally in the browser; no content is transmitted to Kasbah unless the user opts in to anonymous performance metrics
- Simple one‑click installation from the extension store with no account required and support for major AI platforms
- Future roadmap includes clipboard monitoring, file watching, and team audit trails for enterprise environments