Product Roadmap
The journey to securing your sensitive data across the web, right in the browser.
Last updated: November 12, 2026
Core Detection Engine
Robust client-side scanning identifying critical developer secrets and PII.
- 25 API key and token detectors
- PII: emails, SSN, cards, 30+ national IDs with checksums
- High-entropy token detection (Shannon ≥ 4.5 bits/char)
- Custom patterns (Pro/Team, up to 50, ReDoS-safe)
Universal Mode Scanning
Expand protection beyond AI interfaces to cover every text input.
- Universal mode toggle
- Intercepts on keydown & submit
- Zero-latency DOM observation
- Works on any site via optional host permissions
Cross-Browser: Chrome, Edge, Firefox
Ship where the friction is lowest before tackling the hard targets.
- Chrome (shipped, CWS approved)
- Edge (Chromium, near-trivial port)
- Firefox (WebExtensions package built at 1.3.4)
- Single shared detection package across all three
Safari Extension
Native integration for macOS and iOS Safari environments.
- Requires native Mac app wrapper + Xcode
- Apple Developer account + review
- Gated behind demand evidence from Chrome/Edge/Firefox
- Unified background service workers
CLI & IDE Integration
Move beyond the browser into developer workflows.
- akli scan pre-commit hook and CI gate
- VS Code and JetBrains inline squiggles
- One-click redact from the editor
- Same detection package, Node target
Team Dashboard v1
Per-seat visibility for security teams.
- Who triggered what, which secret types, which destinations
- Trend over time, not the raw secret (already redacted)
- Slack/Teams/email alerts on high-severity attempts
- Policy engine: admin rules pushed to all seats
Auto-Redaction Engine
Sanitize inputs on the fly without interrupting workflows.
- Redacts automatically at send time
- Injects numbered [API_KEY_1] placeholders
- Maintains DOM text formatting
- Confidence-gated: high-only mode for zero false positives
Enterprise & Compliance
Visibility and governance for security teams.
- SSO (SAML/OIDC) and SCIM provisioning
- SOC 2 / ISO 27001 compliance exports
- MDM config deployment tools
- Fleet-wide audit log exports
Mobile Paste Guard
Protect secrets on mobile, where the browser model breaks down.
- iOS Safari extension (paste interception)
- Android share-sheet / accessibility service app
- Standalone clipboard scanner app
- Separate product surface, same detection core
API, SDK & Git History
Embed scanning everywhere and catch what already leaked.
- Public API and SDK for customer pipelines
- PR review bots and Slack bots
- Retroactive git history scanner (committed secrets)
- Web SaaS dashboard: full-site crawl + scheduled monitoring
Stay in the loop.
Technical breakdowns, new system builds, and lessons from deploying autonomous AI. One email a week, direct to your inbox.
Weekly architectural updates. Unsubscribe anytime.