CloakDLP
Catch your card number
before it leaves your PC.
CloakDLP watches for a credit card number the moment it's typed, copied, printed, or sent over the network, and can block it outright. Everything runs on your own machine. There is no CloakDLP server, no account, and no telemetry.
Free, open source (MIT), Windows 10/11.
Catches it everywhere it can leak
Four channels, one console, one set of policies.
Typed into a checkout form
A browser extension reads the card field directly, before the browser ever encrypts it, so this works on real HTTPS checkout pages, not just plain HTTP.
Copied to the clipboard
Detects a Luhn-valid card number the instant it's copied, and can clear the clipboard immediately if the matching policy says to block it.
Sent to a printer
Watches the print queue and can cancel a job outright before it reaches the printer.
Sent over the network
A local proxy inspects plain HTTP traffic and can reject a request outright instead of just logging it after the fact.
Risk-aware blocking
Optionally require the destination domain to actually look risky (malware/phishing blocklist, WHOIS domain age) before blocking, so a well-known site you shop at just gets logged instead of stopped.
Zero-config
Install the MSI, and the console opens itself, already signed in, already paired, with a working policy. Nothing to copy-paste, no API keys to wire up by hand.
How it works
Three pieces, all running locally.
Console
A local web app at 127.0.0.1:8123 where you set policies and watch the live incident feed.
Desktop agent
A Windows service covering clipboard, print, and local network traffic.
Browser extension
Covers typed card entry on real checkout pages, which is where most card numbers actually get entered.
The full card number never leaves your browser or your machine. Every match is redacted to the last 4 digits before it's ever written down, into your own local console, running on your own PC. CloakDLP is fully open source under the MIT license, so every claim here is independently verifiable by reading the code.