Small extensions that respect your browser.
ExtHive builds focused, local-first browser extensions. Your content is processed on your machine, never ours — and when an extension does need an account or syncs something, it is on the product page before you install, not buried in a policy.
Free, in fullNo content telemetryNo account required
Every ExtHive extension
Two shipped, three in the workshop. Each one does a single job properly rather than a dozen jobs adequately — so here is what each of them actually looks like at work.
In the workshop
Stop sensitive data before it reaches the AI.
Prompt Guard watches the compose box on ChatGPT, Claude, Gemini, Copilot and Perplexity. The instant a secret, credential, customer record or internal identifier appears, it flags it — and can redact it in place before the request ever leaves your browser.
- Detection that runs before send. Prompt Guard inspects the compose box as you type and paste. The check completes locally in single-digit milliseconds, so the warning appears while you can still act on it.
- 40+ detectors out of the box. AWS, GCP and Azure keys, GitHub and Slack tokens, private keys, JWTs, database connection strings, credit cards with Luhn validation, emails, phone numbers, national IDs and more.
- Your own rules. Add regex or keyword detectors for internal project codenames, customer identifiers, ticket formats or repository paths — whatever counts as sensitive at your organisation.
2 sensitive values detected
AWS access key · Customer email address
Debug this upload script — creds are AKIA4YF2QX7NLEXAMPLE and notify dana@acme.io
Capture, redact and beautify, all on your device.
Grab the visible tab, drag a region, stitch a long page, or reflow the layout to a phone and shoot that. Hide anything private, mark up what matters, drop the result on a background — and export without a byte leaving your machine.
- Five ways to capture. The visible tab, a dragged region, a full page scrolled and stitched into one tall image, a device-size shot reflowed to a phone, tablet or laptop, or an image you paste or upload and edit the same way.
- Redaction that cannot be undone. Blur, pixelate, cover with a solid block, or paint over with a freehand brush, in rectangles, ellipses or other shapes. The cover is flattened into the exported pixels, so what was underneath cannot be recovered from the file.
- You decide what is hidden. There is no auto-detection and no “hide all”. Every hidden region is one you drew, which is the only version of this that can actually be trusted with a customer record.
Four rules we do not bend
Browser extensions run with real access to your browsing. That access is a responsibility, and these are the constraints we hold ourselves to.
Local-first by default
Your content is processed in your browser and never sent to us. Some extensions do offer accounts and sync — always for a feature you asked for, never for the content itself.
Fast enough to forget
Small bundles, no framework bloat in the content script, and heavy work kept off the main thread. You should never feel an extension running.
Minimum permissions
We request the narrowest permission that makes a feature work, and every request is explained in plain language on its product page.
No dark patterns
Free tiers stay genuinely usable, cancelling takes one click, and we never put a security feature behind an upsell. Where an account is needed, we say so before you install.
Pick an extension and get on with your day
Both shipped extensions are free in full, and neither asks for a card, an account or an email address. There is nothing to sign in to.