▓SORDINO
GitHubGet Started
open source · local-first · zero retention

Code Securely With AI

Sordino masks credentials and sensitive information before your prompt leaves your machine— and unmasks the AI's response locally. You work exactly as before. The AI only ever sees the masked version — the sensitive spans Sordino detects, and anything you register.

Get StartedSordino Enterprise →
terminal — sordino activeshield on
$

Vibe coding is fast.
Leaked secrets are the tax.

Tools like Claude Code and OpenAI Codex let you build at unprecedented speed — but every prompt you send can carry API keys, passwords, connection strings, and customer data to a third party, with no assurance against future unintended use or breaches.

Properly cordoning off sensitive information slows you down. So most people don't. Sordino eliminates the trade-off: full speed, zero exposure.

API keys & tokens
pasted into prompts to debug deploys and integrations
Passwords & connection strings
shared so the AI can wire up your database
Customer data & PII
embedded in logs, fixtures, and error messages

How it works

Not zero data retention — zero data access. What Sordino masks, the AI never had to begin with.

01
Detect
Sordino scans every outbound prompt for credentials and sensitive information using prebuilt rules — API keys, passwords, connection strings, and more.
02
Mask locally
Secrets are swapped for opaque tokens before the prompt leaves your machine. The lookup table never leaves your computer — it's only accessible by you.
03
Unmask the response
If the AI's response contains a masked token, Sordino swaps the original back in before you see it. You interact with your tool exactly as before.
your machine: secret ⇄ token  │  the wire & the AI: token only

The best way to keep a secret is to never say it.

A secrets manager works because the raw value never appears where it doesn't need to be. Sordino applies the same rule to AI tools: you set the policy — what must never be said — and Sordino enforces it at the wire.

You hold the policy
What counts as secret is your call — not a provider default.
Register the values that must never be said — keys, passphrases, anything without a reliable pattern. Choose what detection runs on top: credentials and common PII out of the box, an optional local ML model for free-text names and places, custom rules for your organization's own data.
Sordino enforces it
Enforced at the wire — not promised in a policy document.
Registered secrets are masked unconditionally, on every profile. Detected values are swapped for opaque tokens before the prompt leaves your machine, and restored locally the moment the response comes back. The masked wires are fail-closed: mask or refuse — if masking fails, the request is rejected rather than sent unmasked.

It's a win-win: you don't want to share your private information, and the AI platform doesn't need to see it to do its work.

Basic is free. Forever.

Open source for individuals. Managed and customizable for organizations.

Sordino Basicfree · open source
For individual developers who want their credentials kept local.
  • ✓Prebuilt rules for common credentials — API keys, passwords, connection strings
  • ✓Automatic mask / unmask, fully transparent to your workflow
  • ✓Lookup table stays on your machine, accessible only by you
  • ✓Free download, auditable source
Get Started
Sordino Enterprisesubscription · managed
For teams and organizations that need custom masking, auditing, and assurance.
  • ✓Custom rules beyond credentials: PII, customer data, even code
  • ✓1–2 hour guided setup with our team, or fully managed service
  • ✓Live auditing — log exactly what was sent vs. what was masked
  • ✓Permissioning, software updates, and email support included
Talk to us →

Frequently asked questions

Share keys freely.
The AI never had them.

Get StartedExplore Enterprise