Technology · SOC 2 · AI Governance
Your engineers paste secrets into Copilot. HoundShield catches them.
Every developer using ChatGPT, Copilot or Cursor is one paste away from leaking an API key, a credential, or proprietary source. HoundShield inspects each prompt on your hardware and blocks the leak before it reaches the model — no behavior change for your team.
What it is
An OpenAI-compatible proxy that sits in front of every AI tool your engineers use and scans prompts for secrets and source before they leave the network.
Who it's for
CTOs, platform & security engineers, and anyone preparing for SOC 2 who can't see what their team is pasting into AI.
How you use it
Change one base URL in your AI SDK or IDE. Secrets are blocked in under 10ms, logged as SOC 2 evidence, and your devs never notice.
What it detects for you
How it works
- 01
Point your tools at HoundShield
Set the base URL in Copilot, Cursor or your OpenAI SDK. No installs, no agents.
- 02
Secrets get blocked locally
A pasted key or proprietary file is caught on your hardware and never reaches the provider.
- 03
SOC 2 evidence writes itself
Every decision lands in a SHA-256 audit log your auditor can export.
How HoundShield supports SOC 2
| Control / requirement | How HoundShield maps to it | Status |
|---|---|---|
| CC6.1 — Logical access | API keys and credentials blocked before they leave the network | Enforced |
| CC6.7 — Data in transit | Every AI prompt inspected at the egress boundary | Enforced |
| CC7.2 — System monitoring | SHA-256 tamper-evident log of every request | Logged |
| CC7.3 — Incident detection | Real-time alerts on blocked prompts | Alerted |
Common questions
Does it slow my engineers down?+
No. Median scan time is under 10ms and it's a drop-in base-URL change — your team won't notice it until it stops a leak.
Can HoundShield see our source code?+
No. Detection runs entirely on your hardware. Prompts, keys and code are never sent to HoundShield servers.
Which AI tools does it cover?+
Anything that speaks the OpenAI API — ChatGPT, Copilot, Cursor, Claude via gateway, and your own SDK calls. You point the base URL at HoundShield.
What happens to a blocked prompt?+
It's stopped at the boundary, the offending entity is redacted or quarantined for review, and the event is written to the audit log. The user gets immediate feedback.
The average data breach costs $4.45M
That figure is from IBM's 2023 Cost of a Data Breach report. HoundShield costs less than one engineer-hour a month. Start free, no card.
Protect your team