Detects and blocks API keys, secrets, credentials, and PII before they leave your browser. 100% local — nothing sent to any server.