See every AI tool.
Stop data leaks.
Prove compliance.
Lapwing detects every AI tool employees use, stops sensitive data reaching unapproved services, and gives IT and security teams the evidence they need for audits — all in one platform.
Your team is already using AI.
You just don't know it.
Shadow AI is everywhere
Employees use ChatGPT, Claude, Copilot, Gemini, Perplexity and dozens more — on personal accounts, without IT knowing.
Sensitive data leaving every day
PII, financial data, credentials, and source code pasted into consumer AI tools — with no visibility and no controls.
No audit trail, no compliance
GDPR, SOC 2, and client contracts require evidence of AI governance. Spur gives you the audit log and compliance reports to prove it.
Up and running in under an hour
Deploy
Roll out the browser extension via Chrome policy and the endpoint agent from the Deployment guide. Enrol devices with a shared org code — no per-user signup.
Detect & protect
Spur detects AI usage across browser and desktop, runs on-device DLP, and enforces policies — block, redact, warn, or log sensitive submissions.
Investigate & report
Triage open alerts in the queue, explore the Forensics graph, and export executive reports or audit logs for boards and auditors.
Powerful enough for security teams.
Simple enough for everyone.
See every AI tool in use
The Chrome extension and endpoint agent detect AI usage in the browser and on the desktop — ChatGPT, Claude, Copilot, Cursor, Ollama, and dozens more. The dashboard shows risk posture, coverage, violations, and which tools are approved vs shadow AI.
- Dashboard KPIs — open alerts, violations, tool usage, coverage
- AI Tools registry with risk scores and approval status
- Consumer vs business account detection
- Users page — devices, enrolment, and removal
Investigate who connected to what
The Forensics activity graph maps users, enrolled devices, and AI destinations — similar to an EDR network map. Filter by time range, search nodes, and export the graph for incident reviews.
- Interactive user · tool · destination graph
- Time-window controls and edge filtering
- Export to SVG, PNG, or CSV
- Drill-down from any node
On-device DLP — stop sensitive data at source
Classify pasted and submitted content on-device — PII, financial data, credentials, source code, and custom patterns. Enforce block, redact, warn, or log actions per policy tier without sending prompt content to the cloud.
- Violations page — policy breaches and DLP events
- Vulnerabilities — OWASP LLM findings and dispositions
- UK/EU industry patterns and confidence scoring
- Document scan for PDF and Word uploads
Policies, alert triage, and executive reports
Configure allowlists, data rules, and custom patterns in Policies. Triage open alerts FIFO in the alert queue. Generate board-ready executive reports mapped to ISO 27001, SOC 2, NIST, and Cyber Essentials.
- Alert queue — unresolved alerts, oldest first
- Executive report with compliance framework scores
- Audit log export for GDPR and SOC 2 evidence
- Group-based policy targeting via Entra ID
Wire Spur into your security stack
The Connections page configures SIEM forwarding, Microsoft Sentinel, Entra ID sync, M365/Copilot SaaS ingestion, Claude Enterprise audit, and SOC case webhooks — without leaving the portal.
- SIEM — Splunk HEC, Elastic, generic JSON/CEF
- Microsoft Sentinel native Log Analytics
- Entra ID users, groups, and memberships
- M365 / Claude sanctioned SaaS sync
Simple pricing, no surprises
Spur is in early access. Join the list to get release updates and pilot availability.
- Browser extension (Chrome, Edge & Firefox)
- macOS & Windows endpoint agents
- Dashboard, Forensics graph & alert queue
- On-device DLP & policy controls
- Executive reports & audit log export
- Connections — SIEM, Sentinel, Entra, M365
See every AI tool. Stop data leaks.
Prove compliance.
Spur ships visibility, data protection, and policy control. Join the release list to get notified as pilots expand.