What is Data Exfiltration?
Sensitive data moving out of an organization without authorization.
Short answer
Data exfiltration is the unauthorized transfer of data from inside an organization to an external destination. AI tools have become a primary exfiltration channel, because encrypted chat traffic carrying pasted secrets looks identical to normal AI usage.
In depth
Traditional exfiltration channels, like USB drives and email, are well covered by endpoint DLP. AI is different: the data leaves through the same HTTPS traffic employees use all day, and the volume of text flowing to AI platforms makes manual review impossible.
LeakSnitch intercepts exfiltration at the source. The detection engine lives where the data is typed, so it can identify sensitive content and block or redact it before the browser or IDE ever sends the request to the AI provider.
Frequently asked questions
How do AI tools become an exfiltration channel?
Any tool that accepts pasted or uploaded text can carry data out. Coding agents read source files, chatbots accept documents, and search assistants take URLs, so the surface area is wide. Client side detection is the only way to see all of it.
Related terms
Stop AI leaks on the device, not in the cloud.
Install LeakSnitch in under 30 seconds and protect every prompt sent to ChatGPT, Claude, Gemini, and 25+ AI tools. Free for individuals.