Skip to content

Cloak — Masking Engine

Cloak is Sonomos’s real-time masking engine. It automatically intercepts outgoing messages to AI platforms and redacts detected PII before the data leaves your browser.

How Cloak works

When you submit a message to a supported AI platform:

  1. Cloak intercepts the outgoing message
  2. Dagger scans the content for PII
  3. Detected PII is replaced with masked placeholders
  4. The sanitized message is sent to the platform
  5. Your local view is restored with the original values so your workflow isn’t disrupted

This all happens transparently — you type and submit as normal, and Cloak handles the rest.

Supported platforms

PlatformProtectionCoverage
Claude.aiAutomatic maskingFull
GeminiAutomatic maskingFull
GrokAutomatic maskingFull
Other sitesSend Guard fallbackWarning only

Send Guard

For sites without automatic Cloak masking, Send Guard provides a safety net:

  • Banner mode — a non-blocking warning appears when PII is detected in form fields
  • Modal mode — a blocking modal prevents submission until the user reviews and acknowledges the PII risk

Send Guard activates automatically on any site where Cloak doesn’t have platform-specific support.

Enabling Cloak

  1. Click the Sonomos widget on any supported page
  2. Toggle Cloak to on
  3. The widget border changes to indicate active masking
  4. Submit text as normal — Cloak handles interception transparently

Bidirectional protection

Cloak’s architecture supports both outgoing and incoming content protection. Masked values are restored in your browser view, so you see the original text while the AI platform only ever receives redacted content.