◆ LocalMask

See it in action

AI should read your code,
not your secrets.

LocalMask masks secrets, PII, and org data into safe tokens on your machine. Your AI tools read the tokens. The real values stay home.

0:00 / 0:00

Click to unmute 🔇

Download the free CLI Register for early access

Open source, runs offline. localmask scan finds the secrets; localmask publish pushes a masked git mirror your AI tools can read — GitHub, GitLab, Bitbucket, or self-hosted. How the masked mirror works ↓

Local-first privacy for AI coding

This is what the AI
actually sees.

Scan the repo, mask credentials and PII into reversible tokens, and send only tokens to Claude, GPT, or Gemini. Answers come back and rehydrate on your machine. Try the sensitivity levels on the real .env file →

Sensitivity level

          
          payments-service / .env
          
            scanning…
            8 secrets masked · safe to send
            no masking · secrets exposed
          
# payments-service/.env — sent to ClaudeDATABASE_URL=postgres://payments_rw~[DB_USER_0]~:pV9$kQ2!zR~[PASSWORD_0]~@db-prod-01.acme.internal~[HOST_0]~:5432~[PORT_0]~/payments~[DB_NAME_0]~STRIPE_SECRET_KEY=sk_live_51MspeZv8Klo2CqR7xY~[API_KEY_0]~JWT_SIGNING_KEY=hs256-9f3a7c1e8b2d4061~[API_KEY_1]~AWS_ACCESS_KEY_ID=AKIA5J7QX9P2M4RTUVWX~[AWS_KEY_0]~ONCALL_EMAIL=[email protected]~[EMAIL_0]~INTERNAL_API=https://vault.acme.internal~[HOST_1]~/v2

real secret becomes → token the AI sees

What you get

Mask in your editor, or hand the AI a masked mirror.

Masked repo mirror

Scan a repo, publish a private masked copy the AI reads
Every secret becomes a stable ~[TOKEN]~
Git sync keeps the mirror current

AI proxy · prompt firewall Pro

Point any AI tool at LocalMask; prompts are scrubbed live
Bring your own AI + key — OpenAI, Claude, Azure, self-host
Audit log proves no secret reached the provider

Local, learning, yours

Persistent encrypted vault — stable tokens across restarts
Editable detection rules, no code
Local AI model that learns (Pro)
Team-shared vault, LDAP/AD, SSO (Enterprise)

Free & open source on GitHub ↗ — run it entirely offline with the CLI + MCP server.

Pricing

Free forever. Pro and Enterprise are annual, per seat.

Free · OSS

open source

Regex + entropy engine
Masked-repo mirror the AI reads
CLI + MCP server
Edit detections

Get the CLI

Pro

$149

per seat / year

Everything in Free
Local AI model + learning
Web dashboard
AI proxy (prompt firewall)

Buy Pro

Team

$199

per seat / year · 5+ seats

Everything in Pro
Shared org rules
Priority support

Buy Team

Enterprise

Custom

let's talk

Everything in Team
Central proxy fleet
LDAP/AD + SSO
Audit + support

Contact sales

Annual licenses, validated offline (no monthly re-activation, no phone-home). Keys are per seat.

Free CLI · open source

Install and mask a repo in two commands.

Download the free CLI (.tar.gz)

tar -xzf localmask-free-0.9.0.tar.gz && pip install ./localmask-free-0.9.0

localmask scan ./your-repo

Then localmask publish <scan> <masked-repo-url> creates a private masked git mirror your AI tools can safely read. Once we're on PyPI you'll also be able to pip install localmask.

Works with GitHub, GitLab, Bitbucket, self-hosted git & Google Secure Source Manager. Tokens are handled via GIT_ASKPASS — never in a URL, process args, or .git/config — and only masked content is ever pushed. In free you use your own AI (paste the masked files or point it at the mirror); Pro adds built-in Ask-AI + the proxy. Full guide & security on GitHub →

Palantir CEO on CNBC · July 2026

Are you keeping the data?
LocalMask makes the question irrelevant.

Alex Karp told CNBC that enterprises fear one thing about AI vendors: they pay for tokens and hand over their IP. He's right about the worry. Here's the architecture that removes it.

The worry — watch the clip

Karp says something has gone completely wrong with how AI is sold: enterprises send their data and their alpha to model vendors and can't answer the most basic governance question — who ends up holding it?

Clip: CNBC Squawk Box, July 1 2026 (official CNBC YouTube channel)

The answer — mask before it ever leaves

sk-live-4f9d… → ‹API_KEY_01› // the real value never leaves your machine

Secrets and PII are detected and masked locally, before any prompt reaches Claude, GPT, or any model.
Only metadata travels — file path, line number, pattern type. Never the value.
The token map stays on your disk, encrypted, git-ignored. No phone-home. Ever.
Keep using frontier AI. Stop shipping your IP with every prompt.

See how the pre-gate works

LocalMask Pro is not affiliated with, or endorsed by, Palantir, Alex Karp, or CNBC. The clip is embedded from CNBC's official YouTube channel and quoted for commentary.

Private beta

Lock it down before you ship it to AI.

Runs on your laptop; the token vault never leaves it. We're opening a small private beta — leave your email and we'll write once, when it's ready.

AI should read your code,not your secrets.

This is what the AIactually sees.