Kodiak · Say yes to AI, without the leaks

On the device

The AI gets a look-alike. Your people get their answer.

Kodiak runs on each device your people use, and the check happens right there: sensitive data is not sent to a Kodiak server or a third party to be inspected. It swaps customer data and secrets for look-alikes before they leave the laptop, stops AI agents before they do damage, and shows your security team what happened without reading anyone's prompts. It covers browsers, desktop apps and command-line tools, at the office or at home.

1Karina pastes a customer complaint into ChatGPT, with a real CPF and card number.
2Kodiak replaces both with values in the same format before the request leaves her Mac.
3The reply comes back with her real data, and a short note tells her what changed.

Karina typed into ChatGPTMBP-0119

Customer Ana Souza, CPF 529.982.247-25, says the refund for order 88231 never reached her card 4532 0151 1283 0366. Draft a short apology with the next steps.

Kodiak, on her Mac, before anything leaves

What OpenAI receivedSame format, not real

Customer Ana Souza, CPF 910.774.357-20, says the refund for order 88231 never reached her card 4602 2599 8978 9678. Draft a short apology with the next steps.

1 CPF and 1 card number replaced before sending ChatGPT received a look-alike in the same format. Your message was sent, and the reply shows your real data. Why?Redacted · L1

Recorded from the Kodiak agent. Mockbank and its customers are fictional.

How it works

Most of the time, nothing changes for the employee.

Blocking AI sends people to their phones. Kodiak uses the lightest step that keeps the data safe, and steps in harder only when something would do real damage. Every policy rule picks its step.

L0

Observe

Logged for the security team. The person sees nothing.

For exampleAn unapproved AI tool, in Monitor mode

L1

Swap and tell

The AI gets a look-alike in the same format. The reply comes back with the real value. A 6-second note says what changed.

For exampleCPF, card numbers, cloud keys

L2

Hold

A doubtful case waits for the person: send it masked, edit it, or ask for an exception.

For exampleWhat a coding agent is about to read

L3

Stop

Nothing runs and nothing is sent. The person, or the agent, gets the reason in the same chat.

For exampleDROP TABLE, rm -rf, prompt injection

Coding agents

Your engineers' agents run with their credentials. Kodiak watches what they do.

Claude Code, Codex, GitHub Copilot and Gemini CLI read files, run commands and call APIs on the engineer's machine. Kodiak sits between the agent and the model, in both directions.

L3Destructive commands stop before they run. DROP TABLE, rm -rf, force pushes. The agent is told why and asks the engineer what to do next.
L3Hidden instructions in what the agent reads are removed. A poisoned README, issue or web page loses the injected part, and the agent gets a note instead.
L1Secrets in .env files are swapped before they reach the model. The model sees a stand-in. The files the agent writes still get the real key.

claude · ~/mockbank/refunds-service

> Recreate the refunds table on staging for the new migration.

● I'll drop the refunds table on staging so the migration can recreate it.

● Bash(psql "$STAGING_DATABASE_URL" -c 'DROP TABLE refunds;')
  ⎿ Kodiak stopped this command before it ran (DROP TABLE is not allowed on this device). Nothing was run.
     Tell the user and ask how they want to continue.

DROP TABLE stopped Claude Code asked to run it. Nothing ran, and the agent was told why. Need it anyway? Open Kodiak to request an exception. Why?Neutralized · L3

Kodiak Cloud · Requests● Live

Kodiak Cloud Requests page: Karina asks to let a DROP TABLE through on MBP-0119, with Approve once, 24 hours or 7 days

Exceptions

When the policy is in the way, people ask. They don't work around it.

Karina had a good reason to drop that staging table. She asks from the Kodiak app in two clicks, and her Mac applies the answer in seconds.

01She explains why, from the Kodiak app on her Mac.

02Security approves it once, for 24 hours or for a week.

03The policy doesn't change, and the decision goes into the audit log.

Kodiak Cloud

One place for the security team to see every device.

What needs a decision comes first. Every case shows what was stopped, where and why, with the evidence masked.

Kodiak Cloud · Command Center● Mockbank · 20 devices

Kodiak Cloud Command Center for Mockbank: endpoint coverage, AI prompts inspected, interventions, new AI apps, and the decisions waiting

Incidents list with the DROP TABLE case open

Incidents, evidence masked

Who, which device, which app, which rule, and the timeline of what Kodiak did. Alerts can also go to Slack.

Policies list with the step each rule takes and who it applies to

Company and team policies

Everyone gets the company rules. Engineering adds guardrails for coding agents, and Infrastructure stops cloud keys instead of swapping them. Changes reach every device on the next sync.

AI Discovery: AI tools seen across the fleet, which are approved and which wait for review

Shadow AI, found and reviewed

A signed catalog of 188 AI services, updated from the Cloud. New services that look like AI land in a review queue, and nothing unknown is decrypted to find them.

Privacy

Security sees what Kodiak did. Not what people wrote.

Everyday prompts sha256:9f2c…e81a

The Cloud gets a fingerprint of the prompt, never the text.

When Kodiak steps in …Ana Souza, CPF [CPF_BR_REDACTED], says the refund…

Only the words around the finding, with the real value removed.

On the device Kodiak local console on the Mac: the events of this device

Each person can open the Kodiak console and see what happened on their own Mac.

For the CISO

A one-page brief for the board, every Monday.

How much AI the company used, what Kodiak swapped, held and stopped, which tools aren't approved yet, how fast exceptions were answered, and what needs a decision. Sent at 08:00 UTC.

Policy templates for the rules you answer to

LGPDPCI DSSGDPRHIPAACCPASOC 2NIST AI RMF

Each control shows its evidence. Write your own rules, with your own patterns, for any other law or internal policy. Every policy change and every exception is in the audit log.

Weekly AI security briefMon 08:00 UTC

Weekly AI security brief for Mockbank: headline, key numbers against last week, the intervention ladder and the week day by day

Rollout

From one laptop to the whole company.

01

One Mac

Open the installer and allow Kodiak once. Protected in under a minute.

Kodiak.dmg

02

A team

One line in the terminal with your organization's token. Each device shows up in the Cloud with its group.

curl -fsSL …/install | sh -s -- --token [ORG]

03

The company

The same package through the MDM you already use, with the Kodiak profile. Jamf, Intune and Kandji.

Kodiak.mobileconfig

Coverage

Exactly what we cover today.

"Reads" means Kodiak sees the content and can swap, hold or stop it. "Sees use" means it knows which app talked to which AI service and enforces approve or block, without opening the traffic. "In validation" means it is built and tested on recorded requests, and we are still running it with the real app.

Tool	Level	What it covers
ChatGPT and Codex	● Reads	Web, desktop and Codex CLI. Prompts, text attachments and what Codex reads.
Claude and Claude Code	● Reads	Web, desktop and Claude Code CLI. Prompts and what Claude Code reads, with Hold.
Gemini	● Reads	Web and API.
Scripts calling AI APIs	● Reads	Python, Node, Ruby and curl calling the major AI APIs.
GitHub Copilot and Gemini CLI	◌ In validation	Built for chat, agent mode and inline suggestions, tested on recorded requests. Real-app runs are in progress.
Cursor	◐ Sees use	Usage, approve and block. The content is not read yet.
188 AI services in the catalog	◐ Sees use	Named, approved or blocked. Unknown services that look like AI go to a review queue, starting on Windows.
Microsoft 365 Copilot, Apple Intelligence	○ Not yet	They run inside the operating system or Office traffic, out of reach of an on-device proxy.

Demo · 3:55

From an engineer's desk to the CISO's inbox.

Watch one day at Mockbank: a prompt with customer data, an agent about to drop a table, an exception request and the Monday brief.

Kodiak · product demo1080p · EN · PT · ES

English narration, with subtitles in English, Portuguese and Spanish. Product screens and agent output are real; Mockbank is a fictional bank.

Private beta

We're working with a small group of design partners.

No cost during the private beta. Design partners get the full product on every device they enroll.

Kodiak Cloud for your whole fleet, with groups, policies, requests and the CISO brief
The agent for macOS, Apple Silicon and Intel, with Windows in beta
A say in what we cover next

Say yes to AI

Let your people use AI. Keep the data at home.

Start with one Mac: Kodiak protects it in under a minute. When you're ready, roll it out to the whole company through the MDM you already use.

Request beta access Watch the demo

Say yes to AI, without the leaks.

The AI gets a look-alike. Your people get their answer.