circle-info
We've just updated our documentation! If you haven't visited for a while, things may have moved

circle-questionFrequently Asked Questions

Which browsers are supported?

  • Google Chrome

  • Microsoft Edge

  • Mozilla Firefox

  • Safari

  • Other Chromium browsers: Arc, Brave, Vivaldi, Island, Genspark

  • Other Firefox browsers: Zen Browser

  • AI browsers: Comet, Dia

What kind of data is captured by the extension?

The extension monitors end-user web traffic and reports it securely to Harmonic for the purpose of identifying the AI applications being used within an organization.

chevron-rightUsage Metadata (i.e. employee user X, visiting application Y, at time Z)hashtag

We need to collect this data so that we can know when to apply our data protection features.

captured_at | 2024-12-25 12:00:00.000000
user_id     | iusr-000
method      | GET
host        | example.com
path        | /backend-api/me
url         | https://example.com:3500/backend-api/me  
chevron-rightHTTP Request Payloadshashtag

If the traffic meets our filtering criteria, we need to analyze the HTTP payload to understand if there is data that needs to be assessed and protected.

created_at          | 2024-12-05 08:56:09.377369+00
analysed_content_id | 88888888-000-000-000-0000000000-1-0
app_id              | app-000
intercept_user_id   | iusr-000
captured_at         | 2024-12-05 08:56:06.776+00
content             | “Can you review the following claim and propose next steps to take to determine if it is legitimate?”
chevron-rightIP Addresses and User-Agent Stringshashtag

We collect this information so that we can provide source IP addresses and user agent strings for alerts generated and displayed in the Harmonic platform.

chevron-rightRaw Prompts to GenAI Tools Such As ChatGPT, Gemini, Claude, Microsoft Copilot, etc.hashtag

Taken from the HTTP payload. We process raw prompt data as the prompt is sent to our data protection model so that we can determine if the prompt exposed sensitive data that needs to be protected.

Can I download the extension from my browser's extension store?

We currently host the Harmonic extension within our infrastructure, in order to give us more granular control over available versions, and to allow us to respond to any issues more quickly than if we had to submit each new version for review.

Can I manually deploy the extension on one machine?

We don't recommend or support manual deployments as they often cause conflicts with existing managed policies.

How resource-intensive is the browser extension?

The extension simply sends data to the Harmonic platform in order to determine whether sensitive information is being exposed. As such, it is very lightweight and is imperceptible to end-users (except for interventions).

Last updated