The browser is where your people actually meet your data — and where almost nothing is watching. Privalayer sees extensions, paste, upload and every unsanctioned AI tool in use, and it does the seeing on the device rather than in someone else's cloud.
Each area has its own primary action, because a list you cannot act on is a report, not a product.
Every extension across the fleet, with a permission score and a behavioural verdict — remote code loading, obfuscation, observed exfiltration paths, publisher reputation change.
Primary action: set verdict — allow, warn, block, force-remove.
Paste, upload, download, form fill and copy — each with its destination, data class and outcome. Grouped by receiving site, this is the view that changes the conversation.
Primary action: create a policy straight from an event.
Unsanctioned LLM and agent tools discovered from real sessions — not from a static catalogue — with the users, the frequency and the data classes actually submitted.
Primary action: sanction or restrict.
Enrolled devices, browser and extension versions, sidecar status — plus the number nobody else shows you: identities active in your IdP with no protected browser at all.
Primary action: send an enrolment link.
Live rules ordered by precedence with hit counts, templates by regulation and use case, and a full change history with diffs.
Primary action: new policy.
Every screen in this module carries one persistent line: analysis ran on device or in your VPC, and only the finding record crossed the boundary.
Why it lives here: it is the differentiator, so it belongs in the product, not the deck.
A rule that stops work is a rule that stops revenue if you get it wrong. Draft it, replay it against thirty days of real events, and read the exact list of what it would have blocked — by team, by destination, by person — before it touches anyone's workday.
The sidecar runs inside the browser. It reads the content of a paste or an upload, classifies it locally, and applies your policy at the moment of the action. The destination never receives what it should not have, and neither do we.
Connect one device group and watch discovery run. Nothing is blocked until you decide it should be.
No credit card. No agent on the endpoint. Nothing leaves your network.