CyberAura

Monitors AI tool usage and data-exposure signals for your CyberAura hub. Metadata only.

CyberAura Security Monitor — the local-first AI governance platform for the way you actually work. Every day, sensitive data flows into AI chatbots, assistants, and generators — API keys pasted into prompts, customer data dropped into summaries, credentials shared with tools IT never approved. Meanwhile, AI adoption inside every organization is outrunning every policy written to control it. Employees sign up for new AI tools daily, uploads happen in seconds, and the audit trail is whatever you can remember. CyberAura closes that gap: it watches 290+ AI platforms (plus any AI site you add), stops leaks before they're sent, discovers the tools you don't know about, and gives you the governance controls to prove compliance. 100% SELF-HOSTED. NO VENDOR CLOUD. NO ACCOUNT. There is no sign-up and no telemetry. Everything runs on your hardware: the extension in your browser, and the CyberAura Hub on your own computer or your company's own server. Activity records go only to your Hub — never to us. We can't see your data because we never receive it. DETECT LEAKS BEFORE THEY SPREAD — REAL DATA LOSS PREVENTION CyberAura checks what you type, paste, and upload on AI sites and catches the things that should never leave your organization: Social Security numbers, credit card numbers with real validation, bank routing and IBAN numbers, API keys and tokens, private keys, passwords and secrets, database connection strings, email addresses, and phone numbers. It also watches for your own watchlist terms — project codenames, client names, internal jargon, unreleased product names — anything you define. When it finds something, it acts according to the policy you set: it shows a warning, or it stops the prompt or upload before it's sent. Banned platforms are blocked entirely in the browser so the data never reaches the AI service. Policies sync from your Hub, so one rule change protects every device. Detection happens locally in your browser, and records sent to your Hub carry only the type of data found (for example, "SSN") — never the value itself. SHADOW AI, FOUND — AND ACTUALLY ENFORCED CyberAura recognizes 290+ AI platforms the moment you open them — spanning chat assistants, image generators, video and audio creation tools, coding assistants, writing aids, research engines, design platforms, and productivity suites — and you can add new AI sites from your Hub at any time. Every visit is recorded in your Hub with a timestamp, so you always know which tools are in use. It gets better than a list. Every platform can be classified as sanctioned, restricted, banned, or unreviewed. Mark a tool as banned in your dashboard and the extension blocks it in the browser — governance decisions become real enforcement at the keyboard, automatically, on every paired device. Tools in use that aren't in your registry yet surface for review so nothing slips through silently. AI GOVERNANCE, NOT JUST MONITORING Pair the extension with the CyberAura Hub and you get a complete AI governance platform, running on your own hardware: AI system registry — record every AI tool in use with its vendor, owner, intended purpose, data classification, risk tier, and status. Know what you use, why you use it, and who is responsible. Risk assessments — evaluate tools against the NIST AI Risk Management Framework and EU AI Act risk tiers, with scores, findings, mitigations, assessor names, and timestamps. Risk becomes a documented decision, not a gut feeling. Incident response — log AI incidents, move them through open, investigating, contained, and resolved, keep a full timeline, and follow step-by-step response playbooks. Acceptable-use attestations — every user acknowledges the rules, with a record of who agreed and when. Vendor risk records — keep a risk tier, notes, and review history for each AI provider you use. Reports in one click — Executive Summary, AI Usage, Shadow AI, Sensitive Data Exposure, and more, plus EU AI Act, NIST AI RMF, ISO/IEC 42001, and NIST 800-53 compliance reports, live from your own data. Pick a date range and filters, then print or download. THE HUB — YOUR COMMAND CENTER The Hub turns the extension into a fleet: • A dashboard with charts, a governance score, plain-language findings, and a per-device risk list • Multi-device view — every browser running the extension, with live sync status per device • Easy pairing — paste the Hub's pairing key once, or deploy to every computer automatically with Intune, Atera, NinjaOne, or JumpCloud • Centralized policy sync — DLP rules, watchlists, banned tools, and new AI sites pushed to every device from one place • Remote commands — refresh configs, pause or resume monitoring, send a notice, trigger exports, or clear caches right from the dashboard • Role-based access — admin, operator, auditor, and viewer roles with a tamper-evident audit log of who did what • Departments — separate isolated workspaces for each team, each with its own data • Central server mode — serve your whole company from one hub with TLS and hostname controls The Hub runs entirely on your hardware. Still no cloud. HOW IT WORKS Install the extension from the Chrome Web Store — sensitive-data warnings and blocking work immediately. Download the Hub app for Windows or macOS and start it — the dashboard opens in your browser. Paste the Hub's pairing key into the extension (or deploy it company-wide automatically). Policies, DLP rules, and governance flow from the dashboard to every device. To cover AI sites you add in the Hub, click "Turn on monitoring for new AI tools" in the extension once. No accounts. No API keys to manage. No infrastructure to maintain. BUILT FOR INDIVIDUALS AND TEAMS Solo operators protecting client work. Founders keeping proprietary data out of chatbots. Freelancers handling customer data under contract. IT admins governing AI usage across a fleet of devices. Compliance leads who need an audit trail for AI use. If AI touches your work, CyberAura gives you visibility and control without sending your data to a third party. PRICING The extension is free. The Hub requires a paid plan — Solo at $10 per month (1 device), or Team at $8 per user per month (2-seat minimum, 2+ devices). Enterprise plans available — contact us to set up. Every new signup gets a 14-day free trial (card required, billing starts after trial). Your data is never deleted when a plan changes. PRIVACY, PLAINLY STATED Prompt checking happens on your device, for your protection. What you type is never transmitted anywhere — records sent to your own Hub carry only metadata, such as which AI tool was used, when, and the type of data found. The extension keeps only a short queue of records until your Hub receives them; your Hub keeps history according to the retention settings you choose (one year by default). There are no analytics, no trackers, no third parties. Uninstalling the extension removes its data from your browser; your Hub's data stays on your hardware until you delete it. FREQUENTLY ASKED QUESTIONS Does it work offline? Yes. Detection and enforcement run locally in your browser, and the Hub runs on your own hardware — no internet required after install (an optional daily update check can be turned off). Does it slow down my browser? No. Checking is event-driven and lightweight, and runs only on AI platform pages as you type, paste, or send. Which AI platforms are covered? 290+ platforms across chat, image, video, audio, coding, writing, research, design, and productivity — from the biggest names to niche generators — plus any AI site you add in the Hub. Can it really block a banned tool? Yes. Classify a platform as banned in the Hub and the extension blocks it in the browser on every paired device. Do I need the Hub? The extension's sensitive-data warnings and blocking work on their own. The Hub adds the activity record, banned-tool enforcement, policies, the governance suite, multi-device management, departments, and reports. Who can see my data? Only you and the people you give a Hub account to. There is no vendor cloud.