Documentation
Protected EnvironmentsBrowser extension

Browser extension

Install, configure, and test Orthalon browser protection for AI websites.

Plan requirement: Monitor mode is included on all plans. Protect, Business, and Enterprise can enforce active policies (Redact, Coach, Require Approval, Block).

The Orthalon browser extension detects sensitive prompts and file attachments locally in real time before data reaches external AI services like ChatGPT, Google Gemini, and Claude.


1. Install the extension

Download the package

Download Orthalon Extension 1.0.1 (.zip)
(Optional: verify with the SHA-256 Checksum)

Extract the ZIP file

Extract the downloaded orthalon-extension-1.0.1.zip archive into a folder on your computer.

Open Chrome Extensions

Enter chrome://extensions in your Google Chrome address bar.

Enable Developer mode

Turn on the Developer mode toggle in the top-right corner of the Extensions page.

Load the unpacked extension

Click Load unpacked in the top-left corner and select the extracted folder (the directory containing manifest.json).


2. Connect to your organization

  1. Click the Extensions menu (puzzle icon) in the Chrome toolbar and pin Orthalon.
  2. Click the Orthalon icon to open the sensor popup.
  3. In Orthalon, go to Operations → Sensors & keys and provision a Browser extension sensor key for your account.
  4. Copy and paste the key (for example: sk_orthalon_...) into the popup.
  5. Click Connect browser.
  6. The popup status will switch to Protection active, displaying your organization's synchronized policy version.

3. Test and validate protection

Follow these steps to confirm that client-side prompt inspection and policy enforcement are active:

  1. Open an AI application: Navigate to Google Gemini or ChatGPT.
  2. Test benign text: Type an ordinary prompt (such as "Summarize the history of space exploration"). No protection alert will trigger.
  3. Test sensitive data detection: In the chat composer input, type a test prompt containing synthetic corporate data:
    Draft an update to sarah.connor@acme-corp.com using AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
  4. Verify policy overlay: The Orthalon detection engine immediately identifies the corporate email and cloud credential, displaying the inline coaching, redaction, or approval overlay before the prompt is sent.
  5. Review audit logs: Open the Orthalon dashboard and navigate to Discovery → Violations to verify the metadata-only audit event.

4. Supported AI applications

Orthalon enforces data loss prevention across 65+ AI platforms, including:

  • Chat & Assistants: ChatGPT, Google Gemini, Claude, Microsoft Copilot, Perplexity, DeepSeek, Mistral, Grok, Meta AI, Poe
  • Developer & Code AI: GitHub Copilot, Cursor, Replit, Hugging Face
  • Productivity & Writing: Notion AI, Grammarly, DeepL, Jasper
  • Creative & Media AI: Midjourney, Runway, ElevenLabs, Suno

5. Enterprise rollout (MDM / Group Policy)

For organization-wide deployments, IT administrators can automatically push and pre-configure the extension using Chrome Enterprise Management, Microsoft Intune, or Jamf.

Managed storage configuration

Push the following policy schema through your MDM provider:

{
  "sensorKey": "sk_orthalon_your_browser_key",
  "organizationId": "your-organization-id",
  "genericAdapterEnabled": false
}
  • sensorKey: Organization-scoped browser sensor key from Operations → Sensors & keys.
  • organizationId: Your Orthalon organization ID.
  • genericAdapterEnabled: Set to false for standard AI website protection, or true for broad DOM inspection across all websites.