STRIPE_KEY=sk_live_EXAMPLE_NOT_REALsk_live_EXAMPLE_NOT_REALTigerMole detects credentials, secrets and personal data in supported Claude Code and Codex workflows. Identified values are replaced on the device before the request is sent.
Claude Code · Codex · Windows and Linux · v1.4.6
TigerMole brings Claude Code, Codex and supported browser assistants under one local detection policy. Coverage is published by surface and version.
Review coverage by versionA developer is trying to close an incident. The approved tool falls short, so they open a personal account and paste a production trace. Within seconds, corporate context is moving through a service outside IT administration.
Explore the Shadow AI analysisAmong people already using AI at work, 78% brought their own AI tools.
Microsoft and LinkedIn · 2024 Work Trend Index Survey of 31,000 people across 31 countries.Reserve blocking for unsupported or high-risk services. In Claude Code and Codex, TigerMole adds masking to the workflow the team already uses.
Unsupported or unknown services, or risk the organization has decided not to accept.
Keeps work moving, but the data leaves without an additional masking boundary.
Detected values are replaced on the device before the request continues to the provider.
The request starts on the device, changes at the local boundary, and continues to the provider with the detected value replaced.
STRIPE_KEY=sk_live_EXAMPLE_NOT_REALsk_live_EXAMPLE_NOT_REALSTRIPE_KEY=sk_live_EXAMPLE_NOT_REALDetected match · A007STRIPE_KEY=—POST · transformed contentChoose a synthetic example. TigerMole replaces detected matches while preserving the context Claude Code or Codex needs to respond.
# .env.example
DATABASE_URL=[redacted_database_url_01]
STRIPE_KEY=[redacted_stripe_01]
ADMIN_EMAIL=[redacted_email_02]With Team, TigerMole keeps detection metadata locally: rule, category, confidence and sequence. Prompts, responses and original secrets are excluded from the persistent audit.
This record helps security teams explain the deployment during internal reviews and third-party questionnaires.
Examine the evidence and limitations{
"ts_ms": 1784378040000,
"rule_id": "A007",
"gdpr_category": "credential",
"confidence": 0.98,
"field_path": "$",
"request_id": "req_7fd…",
"seq": 1842,
"prev_hash": "sha256:7f3a…"
}Example based on the published schema. Coverage and limitations are documented by version.
Validate TigerMole with Claude Code and Codex, review coverage with security, then expand the deployment by seat.
For one professional working with AI on their own device.
For deploying the same control across multiple seats.
For organizations that need a deployment shaped around their environment.
TigerMole fits into the contracts, policies and controls your organization already uses.
In a technical demo, we will walk through architecture, coverage and deployment for Claude Code and Codex.
Your privacy, your choice
We use essential storage to keep the site working and, only with your consent, analytics through PostHog and Google Analytics 4. We do not load advertising providers. Read our Privacy Policy.