Describe what to protect. Capsulla writes the rules.
Four lists decide what gets stopped: what people paste and type, what they upload, what they download, and the sites where none of it applies. Every one of them starts filled in, and every one of them takes a sentence — Generate with AI turns “our internal ticket numbers, like ACME-1234” into a working rule for you to approve.
Stop the key before it reaches the chat box
Card numbers, API keys, customer records, whatever counts as sensitive in your company. The pattern says what to look for; the action says what happens when it is found, and you choose it per rule.
- Block stops the content — it never reaches the clipboard or the page, and there is nothing to click through. The right answer for a key.
- Warn shows a notification and lets the person continue. Use it while you are still learning what a rule catches.
- Mask replaces the sensitive part and lets the rest through. The question still reaches the assistant; the card number does not.
- Allow changes nothing and only records the match. It is the measuring setting: know how often something happens before you decide to interfere with it.
- Generate with AI drafts the pattern from your description — you approve it, edit it, or throw it away.
A file that should not leave does not leave
Installers, disk images, source code, database dumps. Name them by the type the browser reports or by the extension they arrive with — and if a file is on your list, the upload never starts and the download is cancelled mid-flight. There is no halfway answer for a file, and no warning to click through.
- Both forms, because neither covers everything: a lot of source files arrive with no type at all, and a type still catches a file somebody renamed.
- Name a category — “installers”, “database dumps” — and Generate with AI fills in the list.
- Both lists arrive ready: the things that run when double-clicked on the way in, installers and source code on the way out.
application/x-msdownloadimage/*
.sql.tar.gz
The fastest way to lose a rollout is to annoy people
Your CRM is supposed to be full of customer data, and a warning every time someone works in it is how a security tool earns a reputation. Whitelist those sites and Capsulla stays out completely — nothing checked, nothing recorded, nothing to complain about.
- One domain covers everything under it, so a single line handles a whole tool.
- Describe the tools your team uses and Generate with AI proposes the list.
github.com → api.github.com, docs.github.com, …
Rules without the regular expressions
The same button sits on all four lists. You describe what to protect; the console drafts entries, each with an example it must catch and one it must ignore, and tests both before showing you anything. Nothing is saved until you pick it.
- The drafting runs on your own machine. It never sees what your team pastes, types or uploads.
- Detection itself uses no model at all — patterns, card checksums, file types and domains, matched on the device.
Catch our internal ticket numbers, like ACME-1234
\bACME-\d{4}\b- Catches
ACME-1234 - Ignores
acme 1234
Worth knowing
- Rules run on the device, against text that never leaves it. The console learns that a card number matched; it never learns the number.
- A file is matched by type or by extension, and it is worth keeping both kinds in the list: the type catches a file that was renamed, the extension catches the many files a browser reports no type for at all.
The rest of the console
Stop the next leak before it leaves the browser.
Try it free for 14 days, no card needed. Start with one team and see what Capsulla catches in the first week.