Stop every leak before it leaves the browser.
Start free on 40+ AI chat sites. Upgrade to Pro for automatic redaction, PII & IP guard, custom regex patterns, and universal all-site protection.
Core API key detection for individual developers on ChatGPT, Claude, Gemini, and 40+ AI chat sites.
- ✓25 built-in API key and token detectors (OpenAI, Anthropic, AWS, GitHub, Stripe, JWT, PEM, and more). Pro adds personal-data and network patterns; the coverage page lists all 64
- ✓High-entropy token scanner
- ✓Warns on every detection, with no monthly cap
- ✓100% local in-browser regex execution
- –Automatic secret redaction
- –PII, national ID, credit card & IPv4 guard
Full guard for power users, consultants, and IT admins rolling out protection across a team.
- ✓Everything in Free, with unlimited monthly intercepts
- ✓Automatic Redact & Review replaces secrets with typed placeholders like
[API_KEY_1]in place - ✓PII & Network Guard: emails, phone numbers, credit cards, IBANs, national IDs for 30 countries, IPv4
- ✓Custom regex patterns for internal company tokens
- ✓Universal Mode: scan inputs across every website in Chrome
- ✓Personal intercept feed: every catch logged in your console
Centralized DLP rollout for engineering and operations teams with managed Chrome policies.
- ✓Force-install via MDM / Google Admin so employees cannot disable protection
- ✓Centralized webhook routing (Slack, Microsoft Teams, Telegram, SIEM, Email)
- ✓Zero secret exfiltration: alerts carry metadata only, never the key
- ✓Cloud IT Dashboard storing the latest 500 organization events
- ✓Ready-made Chrome Policy JSON inside the Team Console
- ✓Priority onboarding & custom invoice billing
Checkout did not start. Write to support@dariocositore.com and we will set the seats up by hand.
Compare plans in detail
Everything that ships in the extension, laid out by what it catches, what you can do with it, and what a team gets on top. Detection runs locally in the browser on every plan.
| Capability | Personal Free$0 forever | Most popularPro$7.99 / month or $59 / year | Team Volume$4 / seat / month |
|---|---|---|---|
| What it catches | |||
| API keys and high-entropy tokensOpenAI, Anthropic, AWS, GitHub, Stripe, Google, Slack, JWT, Bearer tokens, PEM private keys and more, across 40+ AI chats and work tools. | Included | Included | Included |
| Personal data and network scanningEmail addresses, phone numbers, payment cards, IBANs, national identity numbers for 30 countries, and IP addresses. | Not included | Included | Included |
| Custom company patternsYour own regular expressions for internal tokens and identifiers. | Not included | Up to 50 patterns | Pushed by policy |
| What you can do | |||
Automatic redact and reviewSwaps the secret for a typed placeholder like [API_KEY_1] before the message leaves the browser. |
Not included | Included | Included |
| Universal modeExtends scanning past the AI chat list to every site in Chrome, for internal tools and custom web apps. | AI chat list only | Included | Enforced by policy |
| Personal intercept feedEvery catch logged in your own console, including sends you pushed past the warning. | Not included | Included | Included |
| For Enterprise | |||
| Team IT ConsoleMonitor the catches as they happen: who hit a secret, on which site, and whether they sent anyway. The feed keeps the last 500 alerts per organization with filters by person, site and action, and shows which installs are alive and how many seats are in use. | Not included | Not included | Included, multi-seat |
| Alert RoutingSlack, Microsoft Teams, Telegram, SIEM webhooks and email the moment a warning fires. | Not included | Not included | Included, multi-seat |
| Chrome Policy & RolloutForce-install through Chrome Enterprise, MDM or the Google Admin console, lock the settings so the policy holds, and configure every machine with one setup code. | Not included | Not included | Included, multi-seat |
Frequently asked questions
How do I get my license key after paying?
The moment the payment is approved, this page verifies the subscription and emails your SG-XXXXXXXXXXXXXXXX license key to the address on your order. Paste it into the extension popup and Pro activates immediately. The key is never shown during checkout and never goes to any other address. Once you sign in to your console you can view it there.
Can I manage my plan or cancel in one click?
Yes. Open the License & Team Console and sign in with your email and password, or with Google. You can check your renewal date, configure IT alerting, or cancel in one click while keeping access through the end of your paid period.
What is your refund policy?
If API Key Leak Intercept Pro is not the right fit, email support@dariocositore.com within 14 days of purchase for a full refund, no questions asked.
Does Pro or Team mode ever send our actual secrets?
Never. Regex detection runs 100% locally inside the browser. Even when IT Team alerting is enabled, alerts only carry metadata (employee email, site hostname, secret category name, action taken, and timestamp).
Overview · License & Team Console · Privacy policy · Roadmap · Changelog · GitHub