AI tools stay.Secrets don't.
Keep tools open. Protect what leaves.
Cursor, Copilot, Claude, Codex — they stay. Secrets and PII don't. Restricting the IDE fails. Redaxnet masks on the path so the tools stay open and what leaves is under control.
Secrets already sit in the files an agent reads.
24,008secrets hardcoded in public MCP configuration files. 2,117 of them still valid.
GitGuardian, State of Secrets Sprawl 2026₹250 crthe Digital Personal Data Protection Act ceiling for failing to take reasonable security safeguards. The safeguard rules bite 13 May 2027.
DPDP Act 2023, s. 8(5) read with the ScheduleOne pointon the way out.
Every AI tool on the laptop talks to a different cloud. Redaxnet is the one place all of them pass through first.
Hosts you have not listed pass straight through uninspected, until you turn deny-unknown on.
Cloud-in-the-middleis the wrong fix.
Cloud-in-the-middle DLP adds a custodian, a hop, and a bill. Redaxnet is local.
Parking another vendor's cloud between the laptop and the model means a second custodian, a second hop, and a second bill. The category meters that bill three ways at once — per seat, per device past the first two, per gigabyte scanned. Redaxnet masks on-device. There is no Redaxnet cloud to route through, so there is nothing to meter.
Extra hop. Extra custodian. Extra bill on top of AI spend.
On-device mask. No cloud hop. Nothing metered.
Under a few ms.One envelope.
Same-length mask for Aadhaar, phone, keys — then re-encrypt. Nothing is blocked. The request completes, the model answers, streaming still works. A gate that says no is a gate developers route around.
Masked today: API keys and tokens, email, phone, Aadhaar, Indian PAN, SSN, card numbers.
Person names are not masked in this build.
Cursor coverage is the Agent path. The Copilot adapter ships without a live-echo claim.
Custom terms, not just secrets. Nominate your own file paths, project names, internal URLs or any phrase you do not want leaving, and it gets the same same-length mask.
Not shipping in this build. Ask for it in a pilot.
No quote call.Just the number.
This category prices by seat, by device, by gigabyte — and publishes none of it.
No per-request billing. The mask runs on the laptop, so there is nothing to meter.
Custom means volume, not a discovery call. Tell us the device count and you get a number back, not a calendar link.
Pilot: 30 days offline, then Observe-only until licensed.