AEGISITE - AI Antivirus for Your Browser

AI antivirus for your browser: blocks prompt injection, hidden manipulation & data exfiltration on ChatGPT, Claude, Gemini & more.

AEGISITE is the browser companion to the AEGISITE AI Antivirus — the first security product built to protect you from AI-specific threats, on your machine and in your browser. WHAT THE EXTENSION DOES Prompt injection detection Catches malicious instructions hidden inside web content, documents, or messages you paste into an AI — before your AI acts on them. Detects role-override attempts, "ignore previous instructions" patterns, encoded payloads, and zero-width character attacks. Hidden & indirect injection protection Scans content you paste or load into an AI for instructions you didn't write. The difference between what YOU typed and what was injected is exactly what AEGISITE is built to catch. In-page data exfiltration neutralization Identifies patterns designed to trick your AI into leaking sensitive information — credentials, documents, personal data — out through its responses. AI activity monitoring Tracks what AI assistants in your browser are doing so you have full visibility, not just when something goes wrong. HOW IT WORKS Everything runs on your device. Your messages are never sent to our servers. The detection rules ship as a signed, automatically updated feed — so you stay protected against new threats without waiting for an app update. Free: real-time alerts when a threat is detected. Pro: automatic blocking across all detection modules. Works with: ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, and more. PART OF AEGISITE AI ANTIVIRUS The extension is the browser sensor of the AEGISITE desktop app — which discovers every AI process running on your machine, monitors their behavior, and quarantines rogue or unexpected AI activity. Together they cover the full surface: what happens in your browser and what runs on your machine. Learn more: aegisite.workflo.hu PRIVACY Your message content never leaves your device. Optional anonymous telemetry (off by default) records only which detection rule matched — never the content itself.