Separate instructions from data
Mark external content as untrusted and keep it outside privileged instructions.
FREE BROWSER TOOL / INPUT QUARANTINE
Find known instruction overrides, invisible controls, encoded payloads and accidental secrets before they enter a model or tool-enabled agent.
LOCAL PREFLIGHT / WAITING FOR INPUT
The scanner checks visible and hidden text without sending it to another model.
DETERMINISTIC SIGNAL REPORT
--That is not proof of safety. Novel or semantic injection can evade deterministic rules.
Redaction removes selected secrets, personal data and invisible controls. It does not neutralize prompt injection.
DEFENSE IN DEPTH / NOT A MAGIC FILTER
Current guidance from OWASP, NIST, Google and Microsoft converges on layered controls because prompt injection cannot be solved by keyword matching alone.
Mark external content as untrusted and keep it outside privileged instructions.
Allowlist tools, parameters and destinations; grant only the access required for the current task.
Require a person to approve payments, deletion, publication, external messages and permission changes.
Treat model output as untrusted before rendering it or passing it to another interpreter.
EXPLICIT LIMITS