Security researchers at Koi found Urban VPN Proxy and 7 related Chrome and Edge extensions collecting full conversations from ChatGPT, Claude, Gemini, Copilot, and other AI assistants.
Source: Koi Security ↗See what your AI assistants, apps, and extensions can read in your email, files, and AI chats.
Shyeld puts your AI assistants, connected apps, and browser extensions in one view, and tells you when something new gets access or changes hands.
Free to join. No payment today. Launches with the most popular services, in Chrome first, then Edge.
Why now
AI now has the keys. Nobody shows you who has them.
Assistants connect to your inbox and files, AI agents browse while you're signed in, and extensions sit inside every page you open. Each one is managed somewhere different.
“You're responsible for Gemini's actions during a task, including mistakes and unexpected results like purchases.”
Google's help page for Chrome's auto browse agent, which “has access to the same sites that you do, including sites you're signed into.”
Source: Google Chrome Help ↗Only 5% of consumers are comfortable with AI taking action on their behalf, even with their approval, according to Ping Identity's 2026 survey of 11,000 consumers in 12 countries.
Source: Ping Identity via PR Newswire ↗How it will work
Three steps. About two minutes.
A browser extension that reads only what you point it at, on your own device.
Scan your extensions
See each extension installed in your browser with a plain-English risk score, including which ones can read AI chat sites or webmail, and whether any are on known-malicious lists.
Map your connected apps
At launch, Shyeld walks you through your Google, Gemini, ChatGPT, Claude, Microsoft, and GitHub settings pages. One click on each, and it builds one map with links to remove what you don't use.
Get told when it changes
Alerts when an extension asks for new permissions or changes owner, plus a weekly digest and a 2-minute cleanup.
Privacy by design
A security tool shouldn't become the next risk.
- Local-first. Your extension list, connected apps, and history stay on your device.
- We won't see what you've installed. Your browser will download the whole public risk list and check it locally.
- Code you can check. We plan to publish the extension's code so anyone can check it.
- Minimal permissions. No passwords, cookies, or browsing history. Settings pages are read only when you click.
- We don't sell your data. No ads, no data selling.
What leaves your device
Planned pricing
Free to start. Pay for the full picture.
Not on sale yet. Pick the plan you'd choose and we'll let you know when it opens. Joining the waitlist costs nothing.
Free
- Extension scan with risk scores
- Known-malicious extension alerts
- “Who can read your AI chats”
- One connected-app check per month
Plus
- Everything in Free
- Full map: Google, Gemini, ChatGPT, Claude, Microsoft, GitHub
- Alerts for new access, new permissions, and owner changes
- Weekly digest and change history
Family
- Plus for up to 5 people or browsers
- Shared household view, encrypted on your devices
- Help set up a parent's or teen's browser
- Alerts to the family admin
Founding year
- Plus for your first year at a founder price
- Early access to the beta
- Reserve now, pay nothing today
- We'll email full terms before you're ever charged
Prices are planned and may change before launch. USD.
Waitlist
Get early access
Shyeld isn't available yet. Leave your email and the plan you'd most likely choose.
You're on the list.
We'll email you when early access opens. Thanks for helping us decide what to build.
FAQ
Questions
Is it safe?
Shyeld isn't released yet, so here's how we're designing it. It will use minimal permissions: it won't ask for your passwords, cookies, or browsing history, and it's designed not to load code from our servers. The risk list it downloads will be signed and will only add labels; it won't be able to trigger actions in your browser.
We plan to publish the extension's code so anyone can check it, and we don't sell your data. Extensions often turn risky after they change hands, which is exactly the kind of change Shyeld is built to flag.
What does it access?
With your permission, it will read the list of extensions installed in your browser and their permissions. When you open one of your own settings pages (for example, Google's linked apps page) and click the Shyeld button, it will read that page to build your map.
All of this is designed to stay on your device. It won't read your email, files, or chats, and it won't remove anything for you: removal happens on each vendor's own page.
Which browsers?
Chrome on desktop first, then Microsoft Edge. Firefox is planned later. Safari isn't supported because it doesn't let extensions list other extensions. There's no mobile app.
When does it launch?
We're building it now and don't have a date yet. Waitlist members will be the first to hear when the beta opens, and founding-year reservations will be first in line.