- 8 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok
- 132 regex patterns across 4 detection facets: PII, secrets, XSS, compliance
- 647 automated tests: 500/500 Node + 3/3 Go + 16/16 headless smoke + 128/128 mini-smoke (5/5 stable runs)
- 2.31% FPR on 6,500 WildChat prompts (5.1x better than v0.1.0-beta baseline)
- Sub-millisecond detection (p50 0.076ms, p95 0.085ms, p99 0.14ms for 500-char prompts)
- 100% on-device, zero network egress by default
- 12 privacy non-negotiables, Apache 2.0, zero external dependencies
- Free, forever
AegisGate Lens vs AegisGate Platform
Two products from the same security team, designed for different deployment points. This page explains what each does, when to use which, and when to use them together.
TL;DR
- AegisGate Lens is a free Chrome extension that protects end users browsing AI tools. Browser-level. No account. Privacy-first.
- AegisGate Platform is an enterprise gateway that protects servers and teams running AI tools. Server-level. Per-team pricing. Central policy + analytics.
Use Lens alone if you’re an individual developer, security researcher, journalist, or privacy-conscious user. Use Platform alone if you’re running AI in production at a company and need central policy + audit + compliance. Use both if you want every layer protected (Lens for users, Platform for servers).
Feature-by-Feature Comparison
| Feature | Lens (free browser ext) | Platform (enterprise gateway) |
|---|---|---|
| Price | Free, forever | Free (Community) / $79/mo (Developer) / custom (Enterprise) |
| Account required | β No | β Yes |
| Browser-side AI provider protection (PII, secrets, XSS, compliance in ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok) | β All 4 facets | β All 4 facets (same corpus) |
| 4-facet detection (PII / Secrets / XSS / Compliance). 2 more (Toxicity, Prompt-Injection) planned for v0.2.0. | β | β |
| Privacy: no prompt text, no URLs, no page content sent | β | β |
| Local processing (no server round-trip for default detection) | β | β |
| Ed25519-signed extension bundle + GitHub Actions provenance | β | β |
| Real-time detection (<1ms latency) | β | β |
| MITRE ATLAS (66 techniques) | β | β |
| OWASP LLM Top-10 (5/10 implemented, 24 patterns total) | β | β |
| Custom rules per user | β | β |
| Team-wide policy (one rule applies to all users) | β | β |
| Team-wide analytics dashboard | β | β |
| Central audit log (who saw what, when) | β | β |
| Server-side AI protection (HTTP API scanning for AI services) | β | β (153+ patterns) |
| MCP protocol protection (Model Context Protocol) | β | β (8 guardrails) |
| A2A agent-to-agent security (mTLS, capabilities, rate limiting) | β | β |
| ACP (Agent Communication Protocol) security | β | β |
| Response scanning (catches bad AI outputs before they reach the user) | β | β |
| Trust Framework (continuous cryptographically-signed trust scoring) | β | β |
| EU AI Act Compliance Module (82 controls, Professional+ tier) | β | β |
| OWASP compliance module | β | β (Developer+) |
| GDPR / HIPAA / PCI / SOC 2 compliance modules | β | β (Professional+) |
| SIEM export (Splunk, Datadog, Elastic, etc.) | β | β (Enterprise) |
| Custom detection rules per team | β | β |
| Slack / Teams / Jira integration | β | β (Enterprise) |
| Self-hosted option | N/A (already client-side) | β (Enterprise) |
| Multi-region deployment | N/A | β (Enterprise) |
| SLA / 24/7 support | β | β (Professional+) |
When to use which
Use Lens alone if:
- You’re an individual developer using AI assistants
- You’re a security researcher analyzing AI behavior
- You’re a journalist or writer concerned about prompt privacy
- You want a privacy-first safety net while you work
- You’re evaluating AegisGate for your team (start with Lens)
Use Platform alone if:
- You’re running AI in production at a company
- You need to enforce AI safety policy across a team
- You need to log AI interactions for compliance
- You need server-side AI protection (your own AI services, not just end-user AI tools)
- You have an SIEM and need alerts
Use both if:
- You want defense in depth: Lens at the user browser + Platform at the server
- You need end-user AI protection AND server-side AI protection
- You’re a security team that needs both behavioral analytics (Platform) and end-user training tools (Lens)
- You want a Lens-detected threat to be promoted to a Platform-wide policy rule (roadmap item T2.2.2)
Technical comparison
Architecture
- Lens: Browser extension (MV3). Content script injected into AI provider pages. Detection runs locally in the browser. Bundle signed with Ed25519, distributed via Chrome Web Store.
- Platform: Self-hosted Docker container (34.7MB). Sits between your AI services and clients. Detection runs in the gateway. Bundle signed with Ed25519, distributed via GitHub Releases.
Detection corpus
Both products share the same detection corpus (the 4-facet taxonomy: PII, secrets, XSS, compliance). When a new threat is added to one, it’s added to the other. 2 more facets (Toxicity, Prompt-Injection) are planned for v0.2.0.
Privacy model
- Lens: Privacy-by-default. No telemetry unless explicitly opted in. 12 non-negotiables (see Lens homepage).
- Platform: Privacy-by-default for detection. Logging is opt-in (Enterprise tier).
Test coverage
- Lens: 500/500 Node tests + 3/3 Go tests + 16/16 headless smoke + 128/128 mini-smoke in real Chrome. Zero external dependencies. All tests in
node:test(Node 20+ stdlib). - Platform: 5,484 tests, 97.8% coverage. Zero external dependencies. All tests in
go test(Go 1.26+ stdlib).
Source code
- Lens: github.com/aegisgatesecurity/aegisgate-lens β Apache 2.0
- Platform: github.com/aegisgatesecurity/aegisgate-platform β Apache 2.0
Pricing
AegisGate Lens
- Free, forever. No “Pro” tier. No credit card. No account.
AegisGate Platform
| Tier | Price | Best for |
|---|---|---|
| Community | Free | Solo developers, getting started |
| Developer | $99/mo | Mid-size teams, custom rules | | Professional | Custom | Compliance (HIPAA, PCI, SOC 2, EU AI Act) | | Enterprise | Custom | Self-hosted, SLA, 24/7 support |
See full pricing for details.
Get started
- π‘οΈ Install Lens from Chrome Web Store β one click, no account
- π Deploy Platform β
docker runin 60 seconds - βοΈ Compare side-by-side β pricing details
- π§ Contact sales for Enterprise questions
Questions? Email security@aegisgatesecurity.io (see .well-known/security.txt for the disclosure policy).