Cookies help us enhance your experience and improve our website. Learn more about cookies

Let AI see your code.
Not sensitive data.

Mask confidential information locally before Cursor or Claude Code sends it to OpenAI/Anthropic

Your Code
db = connect('prod-db')
users = db.query('payments',
  {api_key: 'sk-live-123'})
fetch('api.internal.com')
Exposed secrets
Sheathe.ai Logo
sheathe
Self-hosted proxy
What code assistant sends
db = connect('[DB_1]')
users = db.query('[TABLE_1]',
  {api_key: '[API_KEY_1]'})
fetch('[INTERNAL_URL_1]')
Sheathed

Catch 99.7% of sensitive info

And 100% of what you define with custom regular expressions

0.3%

False negatives

100%

Self-hosted

~90ms

Added latency

Control what data to mask

20+ data types covered by default.
Add new ones or remove unneeded via a JSON config easily

  • API keys
  • Database passwords
  • OAuth tokens
  • JWT secrets
  • AWS credentials
  • Service account keys
  • Webhook URLs
  • Connection strings
  • Email addresses
  • Phone numbers
  • Credit card numbers
  • SSNs
  • Personal information (PII)
  • User IDs
  • Internal URLs
  • Company names
  • Project codenames
  • Employee names
  • Server hostnames
  • IP addresses
  • Docker registry URLs
  • Internal endpoints
  • Environment variables
  • Anything else you configure :]

Host our privacy layer on your premises

Download Sheathe

Deploy via a Bash one-liner

Configure your sensitive data types

Let it index your codebase, docs and tickets

Done - Sheathe is ready to process requests

Then change the endpoint in your favorite assistant

Cursor logo
| Plan, search, build anything. Ask anything about your code

More integrations are coming soon

Pricing

Install Sheathe in any environment, whether that's AWS or a workstation in your home

Solo
$ 400 / lifetime license
Personal license
Self-hosted API
Unlimited requests
OpenAI LLMs compatible
Cursor, Continue, Cline support
Config to customize data types
LLM-friendly documentation
Lifetime license for current version
12 months of updates
1 seat
Email support
Team
$ 5000 / lifetime license
Unlimited seats for your team
Self-hosted API
Unlimited requests
OpenAI LLMs compatible
Cursor, Continue, Cline support
Config to customize data types
LLM-friendly documentation
Lifetime license for current version
12 months of updates
Unlimited seats
Private Slack
Enterprise
Book a meeting
For teams with custom needs
Self-hosted API
Unlimited requests
OpenAI LLMs compatible
Cursor, Continue, Cline support
Config to customize data types
LLM-friendly documentation
Lifetime license for current version
12 months of updates
Unlimited seats
Private Slack
<24 hours support

Frequently Asked Questions

We detect and redact sensitive entities (like API keys, passwords, names, emails, and more) using a combination of regular expressions, pattern-matching, and our own LLM classifier that runs on your infrastructure for intelligent context-aware detection.

Redacted tokens are replaced with deterministic placeholders (e.g., [NAME_1]) that can later be accurately restored in the OpenAI API response.

We don't process any requests from you. They do not go through our servers. The anonymization is completely private, and to allow this, you will need to host it on your machines.

No. We preserve the semantic structure of the prompt. Entities are replaced with realistic placeholders to maintain context. E.g.:

user@email.com → EMAIL_1

LLMs still understand what's being asked, and you get usable, high-quality responses.

Sheathe scans everything in your GitHub. So if .env is in your GitHub, it will scan it too. But don't worry—Sheathe processes data on your premises and doesn't send it anywhere else.

We don't see or store any of your inputs, outputs, or tokens. Everything runs inside your environment.

The only data we store in our database comes to us via this website. It is your user account data when you sign up (email, password, purchases, notification settings).

But Sheathe as a tool doesn't send data anywhere—it processes it locally on your premises.

When Sheathe has indexed your codebase, it takes around 50-200ms to mask or unmask the request/response.

Indexing time depends on your codebase. It takes around 5 minutes to fully scan a popular library like Pandas.

Yes. There are basic rules already in place, but you can edit them, completely remove them, or add your own easily.

Have another question? Contact me on LinkedIn, Twitter or by email

Self-hosting Qwen or DeepSeek
doesn't work for everyone

You don't need to host your own LLMs for privacy. Try Sheathe with OpenAI.

Download Sheathe