Nobody thinks "I am now transmitting this secret." They keep typing while the assistant pulls in whatever is open. Secret scanning catches credentials once they're committed. The leak to the AI happens earlier, at suggestion time.
Locke works at that earlier moment. It masks credentials and sensitive data in the assembled context before it goes upstream. The completions still come, and the secrets stay on your laptop.
The risk with GitHub Copilot
Copilot pulls open files into its context automatically, including ones that hold API keys, connection strings and customer data. Secrets can leave the machine without the developer ever deciding to share them.
How Locke helps
Locke detects secrets and sensitive data in the context being assembled and masks them before transmission. The Sonomos Early Access desktop app screens GitHub Copilot's traffic through its local proxy today. The protection reaches your IDE, where the leak happens, as well as the browser.
Locke is free for one person
It runs on your device and masks sensitive data before a prompt is sent, on the AI tools it covers. Teams starts at $14.99 per seat a month.
