Skip to main content
AI risks6 guides

AI security for the browser.

Browser AI security covers two flows. People paste sensitive data into prompts and uploads. AI agents read pages that can hide instructions. Each guide explains one risk with cited sources. Each one lists controls to check before rollout. Isolation changes where a page runs. It does not change what a model obeys.

Research hubThreat playbooks

Data leakage.

Learn what leaks through prompts and what each vendor keeps.

Sensitive information in AI prompts

Prompt leaks start when people paste private data into AI. Your plan and settings decide what the vendor keeps. Some data never belongs in a prompt.

Data leakage

Prompt injection.

See how hidden instructions in pages and files steer models.

Prompt injection

Prompt injection makes an AI follow instructions it should ignore. Direct attacks use the prompt. Indirect attacks hide in pages, files, or email.

Prompt injection

Tool risk.

Review assistant settings, connectors, and agent features before rollout.

Microsoft Copilot security

Microsoft 365 Copilot only surfaces data users can view. Oversharing becomes Copilot exposure. Prompt injection is the second risk.

Tool risk
Google Gemini security

Gemini security covers two risks. Some chats reach human reviewers and training. Gemini in Chrome can act on pages that hide instructions.

Tool risk
Claude security

Claude’s risk depends on your plan and surface. Consumer chats feed training when Model Improvement is on. Claude in Chrome adds prompt injection risk.

Tool risk
AI plugins and tool data exfiltration

AI data exfiltration is data leaving through AI tool access. Plugins, connectors, and MCP servers widen the path. Injected instructions can trigger it.

Tool risk

Start with these pages.

Try it on the next page you do not trust

Legba is a Chrome extension with two modes. Ghost gives you a private browser route. Shield opens a page in an isolated browser off your device.

Add to Chrome

Free for 30 days. No card required.

Ghost. A private route for your browser. Shield. An isolated browser, off your device. Choose the mode. Close when finished.