Damn — AI-tool discovery

See which AI tools your team opens. Hostname only, never page content. Reports to your own self-hosted Damn. Never blocks.

Damn's browser extension closes the web-AI blind spot: the AI tools your team uses inside a browser tab, which an endpoint agent cannot see. It is built for organizations running their own self-hosted Damn instance. You will need one, plus an enrollment code from your operator, for this extension to do anything. HOW IT WORKS On each navigation the extension takes the destination hostname, classifies it on your device against a list of known AI providers, and discards everything that is not a match before it leaves the browser. Matches are reported to your organization's own Damn server, where they appear in the AI registry alongside the tools discovered on desktops and in CI. WHAT IT COLLECTS Only the hostname of AI tools you open, for example chatgpt.com, and the time. Nothing else. WHAT IT NEVER SEES The pages you visit, the text you type, what the AI generates, your browsing history, cookies, other tabs, or anything you do inside a tool. It holds no content-script, history, cookie or tab-content permission, so it cannot read those things even in principle. The privacy promise is enforced by the manifest, not by policy. WHERE YOUR DATA GOES To the server you configure, and nowhere else. There is no vendor cloud in this path. The extension requests access to exactly one origin, the Damn server you enter at setup, and releases it when you disconnect. It never requests access to sites you browse. WHAT IT DOES NOT DO It never blocks, redirects, or interferes with a page. It reports that a tool is present. It does not observe what was done in it, and it makes no claim to. TRANSPARENCY Open the toolbar popup to see exactly what has been reported, and pause reporting at any time. Each tool is reported at most once every six hours; this is an inventory of what is in use, not a measure of how much. Learn more at https://damn.dev