Integrations and connected sources
EndSecure works where AI is used, on Windows and in the browser, and reports to the security tools you already run.
Everything below is marked plainly: available today, optional, or coming soon. Nothing on this page is a partnership or endorsement; product names identify what EndSecure detects or connects to.
Last updated: September 2026
On the endpoint
The parts of EndSecure that run on Windows and in the browser, where AI is actually used.
How to install them →- Available
EndSecure AI Sensor
A Windows service installed from EndSecure-AI-Sensor.msi. It discovers AI software and local models and reports its own health.
- Installed AI apps and AI processes
- Local LLM runtimes
- Heartbeat every 30 seconds by default
- Single-use enrollment per endpoint
- Available
Browser extension for Chrome
Checks content on supported AI sites before it is sent, and explains a Block or Warn to the person.
- Pasted text
- Typed text when Send is pressed
- File uploads
- Enrolled from its options page
- Available
Browser extension for Edge
The same extension and the same checks in Microsoft Edge, on the same supported AI sites.
- Pasted text
- Typed text when Send is pressed
- File uploads
- Same policies as Chrome
- Available
Clipboard Guard
Part of the sensor. Checks text pasted into desktop AI apps against your policy.
- Pastes into desktop AI apps
- Same DLP detectors and policies
- Hand-typed text is not inspected
Security operations
Where AI decisions go after they are made, so your SOC sees them next to everything else.
- Optional
Wazuh
Connect your Wazuh manager during setup or later. The sensor works alongside the Wazuh agent and AI decisions arrive as Wazuh alerts.
- Rule 100711 (level 12): submission blocked
- Rule 100712 (level 8): submission redacted
- Rule 100713 (level 7): user warned
- Rule 100714 (level 5): AI application detected
- Coming soon
SIEM export
Send EndSecure events to other SIEM platforms.
- Coming soon
Syslog
Forward AI events and decisions over Syslog.
- Coming soon
Slack notifications
Tell a channel when a high-severity incident opens.
Wazuh, optional
AI decisions next to your endpoint alerts
If you run Wazuh, EndSecure does not replace it. The sensor runs beside the Wazuh agent, and each AI decision becomes an alert your analysts already know how to triage. Removing the sensor leaves the Wazuh agent untouched.
See the Wazuh integrationAI that EndSecure discovers
Examples of the tools the sensor and extension recognise, and the telemetry level you can expect for each kind. The console shows the level each application actually reached.
Cloud AI in the browser
- ChatGPT
- Claude
- Gemini
- Microsoft Copilot
- Perplexity
With the extension on a supported site, content is checked before it is sent. Without it, only the AI destination is seen.
Typical telemetry:FULLPARTIAL
Desktop AI apps
- ChatGPT Desktop
- GitHub Copilot
- Cursor
- Windsurf
- Claude Code
Detected when installed or running. Pasted text is checked by Clipboard Guard; typed text is not.
Typical telemetry:FULLPROCESS ONLY
Local LLM runtimes
- Ollama
- LM Studio
- AnythingLLM
- LocalAI
- Jan
- llama.cpp
Detected when installed or running on the endpoint, with metadata where the local model service reports it.
Typical telemetry:METADATA ONLYPROCESS ONLY
See what EndSecure finds on your endpoints
Install the sensor on one Windows endpoint and the AI inventory starts filling in. Join the waitlist for early access.