πŸ›‘οΈ AegisGate Lens v0.1.4canonical facts (source: docs/FACTS.md)
  • 8 AI providers: ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok
  • 132 regex patterns across 4 detection facets: PII, secrets, XSS, compliance
  • 647 automated tests: 500/500 Node + 3/3 Go + 16/16 headless smoke + 128/128 mini-smoke (5/5 stable runs)
  • 2.31% FPR on 6,500 WildChat prompts (5.1x better than v0.1.0-beta baseline)
  • Sub-millisecond detection (p50 0.076ms, p95 0.085ms, p99 0.14ms for 500-char prompts)
  • 100% on-device, zero network egress by default
  • 12 privacy non-negotiables, Apache 2.0, zero external dependencies
  • Free, forever

AegisGate Lens vs AegisGate Platform

Two products from the same security team, designed for different deployment points. This page explains what each does, when to use which, and when to use them together.

TL;DR

  • AegisGate Lens is a free Chrome extension that protects end users browsing AI tools. Browser-level. No account. Privacy-first.
  • AegisGate Platform is an enterprise gateway that protects servers and teams running AI tools. Server-level. Per-team pricing. Central policy + analytics.

Use Lens alone if you’re an individual developer, security researcher, journalist, or privacy-conscious user. Use Platform alone if you’re running AI in production at a company and need central policy + audit + compliance. Use both if you want every layer protected (Lens for users, Platform for servers).


Feature-by-Feature Comparison

FeatureLens (free browser ext)Platform (enterprise gateway)
PriceFree, foreverFree (Community) / $79/mo (Developer) / custom (Enterprise)
Account required❌ Noβœ… Yes
Browser-side AI provider protection (PII, secrets, XSS, compliance in ChatGPT, Claude, Gemini, Copilot, DuckDuckGo, Perplexity, Mistral, Grok)βœ… All 4 facetsβœ… All 4 facets (same corpus)
4-facet detection (PII / Secrets / XSS / Compliance). 2 more (Toxicity, Prompt-Injection) planned for v0.2.0.βœ…βœ…
Privacy: no prompt text, no URLs, no page content sentβœ…βœ…
Local processing (no server round-trip for default detection)βœ…βœ…
Ed25519-signed extension bundle + GitHub Actions provenanceβœ…βœ…
Real-time detection (<1ms latency)βœ…βœ…
MITRE ATLAS (66 techniques)βœ…βœ…
OWASP LLM Top-10 (5/10 implemented, 24 patterns total)βœ…βœ…
Custom rules per userβŒβœ…
Team-wide policy (one rule applies to all users)βŒβœ…
Team-wide analytics dashboardβŒβœ…
Central audit log (who saw what, when)βŒβœ…
Server-side AI protection (HTTP API scanning for AI services)βŒβœ… (153+ patterns)
MCP protocol protection (Model Context Protocol)βŒβœ… (8 guardrails)
A2A agent-to-agent security (mTLS, capabilities, rate limiting)βŒβœ…
ACP (Agent Communication Protocol) securityβŒβœ…
Response scanning (catches bad AI outputs before they reach the user)βŒβœ…
Trust Framework (continuous cryptographically-signed trust scoring)βŒβœ…
EU AI Act Compliance Module (82 controls, Professional+ tier)βŒβœ…
OWASP compliance moduleβŒβœ… (Developer+)
GDPR / HIPAA / PCI / SOC 2 compliance modulesβŒβœ… (Professional+)
SIEM export (Splunk, Datadog, Elastic, etc.)βŒβœ… (Enterprise)
Custom detection rules per teamβŒβœ…
Slack / Teams / Jira integrationβŒβœ… (Enterprise)
Self-hosted optionN/A (already client-side)βœ… (Enterprise)
Multi-region deploymentN/Aβœ… (Enterprise)
SLA / 24/7 supportβŒβœ… (Professional+)

When to use which

Use Lens alone if:

  • You’re an individual developer using AI assistants
  • You’re a security researcher analyzing AI behavior
  • You’re a journalist or writer concerned about prompt privacy
  • You want a privacy-first safety net while you work
  • You’re evaluating AegisGate for your team (start with Lens)

Use Platform alone if:

  • You’re running AI in production at a company
  • You need to enforce AI safety policy across a team
  • You need to log AI interactions for compliance
  • You need server-side AI protection (your own AI services, not just end-user AI tools)
  • You have an SIEM and need alerts

Use both if:

  • You want defense in depth: Lens at the user browser + Platform at the server
  • You need end-user AI protection AND server-side AI protection
  • You’re a security team that needs both behavioral analytics (Platform) and end-user training tools (Lens)
  • You want a Lens-detected threat to be promoted to a Platform-wide policy rule (roadmap item T2.2.2)

Technical comparison

Architecture

  • Lens: Browser extension (MV3). Content script injected into AI provider pages. Detection runs locally in the browser. Bundle signed with Ed25519, distributed via Chrome Web Store.
  • Platform: Self-hosted Docker container (34.7MB). Sits between your AI services and clients. Detection runs in the gateway. Bundle signed with Ed25519, distributed via GitHub Releases.

Detection corpus

Both products share the same detection corpus (the 4-facet taxonomy: PII, secrets, XSS, compliance). When a new threat is added to one, it’s added to the other. 2 more facets (Toxicity, Prompt-Injection) are planned for v0.2.0.

Privacy model

  • Lens: Privacy-by-default. No telemetry unless explicitly opted in. 12 non-negotiables (see Lens homepage).
  • Platform: Privacy-by-default for detection. Logging is opt-in (Enterprise tier).

Test coverage

  • Lens: 500/500 Node tests + 3/3 Go tests + 16/16 headless smoke + 128/128 mini-smoke in real Chrome. Zero external dependencies. All tests in node:test (Node 20+ stdlib).
  • Platform: 5,484 tests, 97.8% coverage. Zero external dependencies. All tests in go test (Go 1.26+ stdlib).

Source code


Pricing

AegisGate Lens

  • Free, forever. No “Pro” tier. No credit card. No account.

AegisGate Platform

TierPriceBest for
CommunityFreeSolo developers, getting started

| Developer | $99/mo | Mid-size teams, custom rules | | Professional | Custom | Compliance (HIPAA, PCI, SOC 2, EU AI Act) | | Enterprise | Custom | Self-hosted, SLA, 24/7 support |

See full pricing for details.


Get started


Questions? Email security@aegisgatesecurity.io (see .well-known/security.txt for the disclosure policy).