STRIPE_KEY=sk_live_EXAMPLE_NOT_REALsk_live_EXAMPLE_NOT_REALWork with AI. Keep secrets on your device. TigerMole masks the sensitive values it detects before a request leaves compatible Claude Code and Codex workflows.
See how it worksClaude Code · Codex · Windows and Linux · technical reference v1.4.6
Help me review this configuration.
STRIPE_KEY=sk_live_EXAMPLE_NOT_REALValue replaced before sending
Help me review this configuration.
STRIPE_KEY=[redacted_stripe_01]Illustrative example of a supported flow.
TigerMole brings Claude Code, Codex and supported browser assistants under one local detection policy. Coverage is published by surface and version.
Review coverage by versionIntegrations, activity and license status in one local application. Check what is active before you start working.
Explore the application
TigerMoleProtection status on this device.
This window does not display conversations, secrets or raw audit records.
The extension connects supported sites to the TigerMole local client. Check site protection and open settings without leaving your browser.
Check whether protection is active on the page you have open.

claude.aiProtectedProtection cannot be disabled from the browser.
A developer is trying to close an incident. The approved tool falls short, so they open a personal account and paste a production trace. Within seconds, corporate context is moving through a service outside IT administration.
Explore the Shadow AI analysisAmong people already using AI at work, 78% brought their own AI tools.
Microsoft and LinkedIn · 2024 Work Trend Index Survey of 31,000 people across 31 countries.Reserve blocking for unsupported or high-risk services. In Claude Code and Codex, TigerMole adds masking to the workflow the team already uses.
Unsupported or unknown services, or risk the organization has decided not to accept.
Keeps work moving, but the data leaves without an additional masking boundary.
Detected values are replaced on the device before the request continues to the provider.
The request starts on the device, changes at the local boundary, and continues to the provider with the detected value replaced.
STRIPE_KEY=sk_live_EXAMPLE_NOT_REALsk_live_EXAMPLE_NOT_REALSTRIPE_KEY=sk_live_EXAMPLE_NOT_REALDetected match · A007STRIPE_KEY=—POST · transformed contentChoose a synthetic example. TigerMole replaces detected matches while preserving the context Claude Code or Codex needs to respond.
# .env.example
DATABASE_URL=[redacted_database_url_01]
STRIPE_KEY=[redacted_stripe_01]
ADMIN_EMAIL=[redacted_email_02]With Team, TigerMole keeps detection metadata locally: rule, category, confidence and sequence. Prompts, responses and original secrets are excluded from the persistent audit.
This record helps security teams explain the deployment during internal reviews and third-party questionnaires.
Examine the evidence and limitations{
"ts_ms": 1784378040000,
"rule_id": "A007",
"gdpr_category": "credential",
"confidence": 0.98,
"field_path": "$",
"request_id": "req_7fd…",
"seq": 1842,
"prev_hash": "sha256:7f3a…"
}Example based on the published schema. Coverage and limitations are documented by version.
Validate TigerMole with Claude Code and Codex, review coverage with security, then expand the deployment by seat.
For one professional working with AI on their own device.
For deploying the same control across multiple seats.
For organizations that need a deployment shaped around their environment.
TigerMole fits into the contracts, policies and controls your organization already uses.
In a technical demo, we will walk through architecture, coverage and deployment for Claude Code and Codex.