Playgrounds →PromptShield Live

AI Prompt DLP & Secret Masking Simulator

Test real-time AI Data Loss Prevention (DLP). Paste sample AWS keys, OpenAI tokens, or Stripe secrets. PromptShield uses 30+ regex signatures and Shannon entropy to intercept, mask with deterministic surrogates, and rehydrate AI responses entirely client-side.

< 1ms Interception
0 Plaintext Leak
Prompt Text (With Embedded Secrets)
Contains live 20-character AWS Access Key ID and 40-character Secret KeyCloud Credentials
Browser Extension:Chrome Web Store ID: oplklbom...
Sanitized Egress Stream (2 credentials scrubbed)
Status: BLOCKED / REDACTED
Entropy: 5.30 bits/charLatency: < 0.8ms
Help me write an automated deployment script for our production S3 bucket.
Here are our root IAM credentials:
AWS_ACCESS_KEY_ID="[SURROGATE_AWS_KEY_01]"
AWS_SECRET_ACCESS_KEY="[SURROGATE_AWS_SECRET_02]"
Deploy to bucket "s3://corp-finance-production-records"
Zero-Leak Bidirectional Rehydration Test

Simulate the LLM returning a code snippet containing your surrogate token. When rehydration is toggled, PromptShield swaps the surrogate back into the real credential locally without the AI provider ever receiving it:

To configure your script safely, use the credentials as follows:

const client = new ServiceClient({
  apiKey: "[SURROGATE_AWS_KEY_01]"
});
client.verify();
AWS IAM Access Key ID3.68 bits
Mask: [SURROGATE_AWS_KEY_01]
AWS IAM Secret Access Key4.66 bits
Mask: [SURROGATE_AWS_SECRET_02]

Enterprise PromptShield Architecture

Deterministic surrogate masking + sub-millisecond sliding window entropy scanners.

Read PromptShield Spec
1. Format-Preserving Surrogates

Replaces raw API keys with deterministic synthetic tokens so coding LLMs can write syntactically correct code without knowing your production secret.

2. Local WebCrypto Rehydration

When the AI streams back code with your surrogate token, PromptShield rehydrates the original credential locally inside the browser.

3. Central Fleet Policy Sync

Distribute custom enterprise codenames, forbidden internal domains, and client PII regex rules across 10,000+ employee browsers via api.promptshield.io.