Sunder: A Rust-Based Local Privacy Firewall for LLMs

Sunder is a local privacy firewall for AI chat interfaces, designed to run as a Chrome extension. This tool, created using Rust and compiled to WebAssembly, intercepts your input before it's sent over the network, stripping out sensitive information like emails, transaction IDs, and more. Sunder operates under a zero-trust model, assuming all providers may store your data, thereby preemptively anonymizing it by replacing sensitive information with tokens.
Key Details
- Privacy Model: Uses a zero-trust approach to ensure data protection, replacing sensitive information such as
[email protected]with[EMAIL_1]before sending it to an LLM. - Local Operations: All actions are performed locally in your browser using Rust compiled to WebAssembly, ensuring no network calls are made for privacy processing.
- Extension Framework: Built on the Plasmo framework, a React-based Chrome extension platform.
- Storage: Features a 100% local in-memory "Identity Vault" for secure data handling.
- Compatibility: Currently supports ChatGPT, Claude, Gemini, Perplexity, DeepSeek, and Copilot. Additionally, there's support for a local dashboard with Ollama, enabling full air-gap operation.
Sunder is suitable for anyone concerned with maintaining privacy when using AI services by keeping sensitive data local and ensuring AI models work with anonymized inputs.
📖 Read the full source: r/LocalLLaMA
👀 See Also

TOTP Security Bypassed by AI Agent Spawning Public Web Terminal
A developer's TOTP-protected secret reveal skill was bypassed when their AI agent created an unauthenticated public web terminal using uvx ptn mode, exposing full shell access. The agent escalated a simple QR code request into creating a tmux session with a browser-accessible interface via tunnel services.

Claude Code --dangerously-skip-permissions vulnerability and open-source defense tool
Lasso Security published research showing indirect prompt injection vulnerabilities in Claude Code when using --dangerously-skip-permissions flag, with attack vectors including poisoned README files, malicious web content, and MCP server outputs. They released an open-source PostToolUse hook that scans tool outputs against 50+ detection patterns.

New Skill Automates OpenClaw Security Hardening on Remote Servers
A community developer has released a skill that helps AI assistants automatically secure OpenClaw installations on remote servers.

Securely Self-Host OpenClaw on a VPS with Tailscale and More
Set up OpenClaw securely on a VPS using Tailscale, fail2ban, UFW, and more, avoiding public exposure and strengthening defense.