Browser · Desktop · Code

Your team already uses AI. TrustSHIELD stops the leak.

Secrets, PII, and prompt-injection get blocked across 22 AI platforms — in the browser, on the desktop, and in your code. Every block is recorded on AIREC's tamper-evident evidence spine, so every decision is provable later.

AIREC
Powered by AIREC.

Every block, redaction, and verification TrustSHIELD makes is recorded on AIREC's hash-chained evidence spine, with Ed25519-signed checkpoints — independently verifiable, offline, with zero credentials.

Explore the platform →
22AI platforms defended in the browser
19native AI processes watched on the desktop
39AI domains in the coverage watchlist
14+secret & credential patterns hard-blocked
4detection engines in the decision path
Three layers of coverage

Defend the AI your team already reaches for.

Not one approved chat box — the actual tools. TrustSHIELD blocks at the point of use (defense at the UI layer, not a network proxy), so risky content never leaves the device.

22

In the browser

A managed extension defends ChatGPT, Claude, Gemini, Copilot, Perplexity, and 17 more — detecting and blocking before send.

Pushed via your existing Chrome / Edge policy. Zero-touch SSO.
19

On the desktop

A native agent watches 19 AI processes plus a 39-domain watchlist — so coverage holds even when there's no browser involved.

Deployed via MDM — Intune, Group Policy, or Jamf.
SDK

In your code

Drop-in shims for Anthropic and OpenAI, in Node and Python, wrap your own AI calls with the exact same policy.

One import. Governs what you build, not just what you click.
Watch it work

Buyers believe what they see working.

Real screenshots from the actual app — the threat is caught in red, the safe state is teal. Then watch the full walkthrough across the desktop, the extension, and the Command Center.

claude.ai · IdentiGUARD
IdentiGUARD blocks an API key before it reaches Claude
Catch a secret — an AWS key is hard-blocked. No "send anyway."
claude.ai · Phantom
Phantom redacts PII and shows original vs redacted before send
Redact PII live — see exactly what gets sent vs. held back.
Catch a secret — IdentiGUARD hard-block
Redact PII — Phantom, original vs. redacted
Verify a citation — HalGuard confidence badge
Stop an injection — jailbreak caught & flagged
Four detection engines

What's doing the blocking.

Four of AIREC's ten platform engines run in TrustSHIELD's decision path — working today and in active development, hardened and tuned with every deployment.

InjectionDefenderworking

Detects and blocks prompt-injection and jailbreak attempts before they reach the model.

IdentiGUARDworking

Zero-tolerance credential protection across 14+ secret patterns — API keys never reach an AI platform.

Phantomworking

Finds and redacts PII / PHI — SSNs, emails, identifiers — and shows you exactly what gets sent.

HalGuardworking

Checks AI responses for unsupported claims and missing citations before your team relies on them.

Trust that adapts

TrustSHIELD learns who to trust.

Beyond block/allow — behavioral trust, longitudinal history, and a single grade your CISO can read at a glance.

Forensic Confidence — one grade for your whole org

Five independent integrity signals fold into a single 0–100, A–F score a federal evaluator or CISO reads first — recomputable from public verification + the audit chain, with no platform-internal trust required.

Screenshot: demo-tenant data, illustrative.
Command Center · Forensic Confidence
Forensic Confidence score of 96, Grade A, with five-signal breakdown

Trust Reflex

A live 0–150 behavioral score; riskier sessions automatically get more friction.

Near-real-time (≈30s poll), not instant.

Trust Streaks

Consistent, safe users earn reduced friction over time — security that rewards good behavior.

Symbiotic Trust

An attack caught at one org can harden every other — only hashed fingerprints cross tenants, never content.

Architected for federation; single-tenant today.

True North

Ask every major model at once and get one cross-checked answer, with each claim's sources in a Deep Dive.

TrustFlash evidence

Ed25519-signed checkpoints over the audit chain — auditor-verifiable offline.

Signing live; durable persistence in progress.
Built for fleets

Deploy to 5 or 5,000.

One Command Center for policy, budget governance, a live enforcement feed, and the signed audit log — deployable across managed endpoints.

Command Center · Audit Chain
Command Center audit chain with Ed25519-signed checkpoints and per-row verify
Command CenterCentral admin: policy, budget governance, a live enforcement feed, and the tamper-evident audit log.
MDM rolloutWindows Group Policy via validated ADMX. Intune and Jamf shipped as deployment templates.
M365 zero-touchPush enrollment via Group Policy — users never see a login.
Kill switchesPer-component, operator-controlled — turn any layer off in an instant.
Command Center screenshot: demo-tenant data, illustrative.
Honesty as a feature

We publish the dataset, the runner, and our weak spots.

We don't ask you to trust a marketing stat. The detection benchmark ships with its dataset and runner, a written "Known Limitations" page, and an offline verifier — so you can reproduce every number yourself.

Reproducible — public dataset + runner
Known Limitations — written down, not hidden
Blocks before send — UI-layer defense, not a network proxy
Provable — every block on the signed evidence spine
The full benchmark — dataset, runner, and a written Known Limitations page — ships in the evidence pack on the AIREC platform. See the methodology →