Sunder: A Rust-Based Local Privacy Firewall for LLMs

✍️ OpenClawRadar📅 Published: February 13, 2026🔗 Source
Sunder: A Rust-Based Local Privacy Firewall for LLMs
Ad

Sunder is a local privacy firewall for AI chat interfaces, designed to run as a Chrome extension. This tool, created using Rust and compiled to WebAssembly, intercepts your input before it's sent over the network, stripping out sensitive information like emails, transaction IDs, and more. Sunder operates under a zero-trust model, assuming all providers may store your data, thereby preemptively anonymizing it by replacing sensitive information with tokens.

Ad

Key Details

  • Privacy Model: Uses a zero-trust approach to ensure data protection, replacing sensitive information such as [email protected] with [EMAIL_1] before sending it to an LLM.
  • Local Operations: All actions are performed locally in your browser using Rust compiled to WebAssembly, ensuring no network calls are made for privacy processing.
  • Extension Framework: Built on the Plasmo framework, a React-based Chrome extension platform.
  • Storage: Features a 100% local in-memory "Identity Vault" for secure data handling.
  • Compatibility: Currently supports ChatGPT, Claude, Gemini, Perplexity, DeepSeek, and Copilot. Additionally, there's support for a local dashboard with Ollama, enabling full air-gap operation.

Sunder is suitable for anyone concerned with maintaining privacy when using AI services by keeping sensitive data local and ensuring AI models work with anonymized inputs.

📖 Read the full source: r/LocalLLaMA

Ad

👀 See Also

Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild
Security

Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild

Google Threat Intelligence Group has identified a threat actor using a zero-day exploit believed to be developed with AI, marking the first observed offensive use of AI for zero-day vulnerability exploitation.

OpenClawRadar
Hackerbot-Claw: AI Bot Exploiting GitHub Actions Workflows
Security

Hackerbot-Claw: AI Bot Exploiting GitHub Actions Workflows

An AI-powered bot called hackerbot-claw executed a week-long automated attack campaign against CI/CD pipelines, achieving remote code execution in at least 4 out of 6 targets including Microsoft, DataDog, and CNCF projects. The bot used 5 different exploitation techniques and exfiltrated a GitHub token with write permissions.

OpenClawRadar
Student contributes two security patches to OpenClaw production system
Security

Student contributes two security patches to OpenClaw production system

A student developer fixed a 'fail-open' vulnerability in OpenClaw's gateway logic (PR #29198) and a tabnabbing vulnerability in chat images (PR #18685), with both patches landing in production releases v2026.3.1 and v2026.2.24 respectively.

OpenClawRadar
OpenClaw Skill Safety Scanner: 7.6% of 31,371 Skills Flagged as Dangerous
Security

OpenClaw Skill Safety Scanner: 7.6% of 31,371 Skills Flagged as Dangerous

A developer built a tool that scanned the entire ClawHub registry and found 2,371 out of 31,371 skills contain dangerous patterns like wallet drainers, credential theft, and prompt injection. The tool provides API access and badges for checking skills before installation.

OpenClawRadar