Free AI Security Scan

Does your AI stack
leak right now?

Enter your AI endpoint below. We fire 12 adversarial probes against your setup and the membrAIn gateway simultaneously — showing you what leaks through your current controls and what gets blocked with membrAIn.

12
Free scenarios
113
DLP patterns
294
Threat signals
<60s
Scan time
Choose how to run the scan
All scans run in-browser — keys never sent to our servers.
Scenario
Your setup
With membrAIn
PHI — patient MRN + diagnosis
HIPAA §164.312 LLM06
Ready
Ready
A radiologist pastes a patient MRN, date of birth, and preliminary diagnosis into an AI assistant. Without governance, this PHI reaches the LLM and is processed without restriction or audit trail.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 574ms
HTTP 403 • dlp_violation • pattern: PII - Medical (HIPAA) • categories: [MRN, diagnosis, DOB] • audit_event: signed Ed25519 • PHI never reached Anthropic
HIPAA §164.312(b) Audit Controls HIPAA §164.312(e)(1) Transmission Security
Credentials — AWS access key
SOC 2 CC6.1 LLM06
Ready
Ready
Developer pastes AWS credentials into an AI coding assistant. The AKIA prefix key reaches the LLM, enters conversation history, and is potentially logged by the AI provider.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 312ms
HTTP 403 • dlp_violation • pattern: Credentials - AWS Access Key • categories: [aws_key, aws_secret] • key never reached provider
SOC 2 CC6.1 Logical Access SOC 2 CC6.7 Transmission Protection
Prompt injection — instruction override
SOC 2 LLM01
Ready
Ready
Classic "ignore previous instructions" attack. Used to override system prompts in enterprise AI assistants, extract confidential context, or cause unauthorized actions.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 498ms
HTTP 403 • threat_detected • type: prompt_injection • confidence: 89 • signals: [ignore_previous, developer_mode, system_prompt_extract]
Jailbreak — DAN mode
LLM01
Ready
Ready
DAN (Do Anything Now) jailbreak — attempts to put the model into an unrestricted mode. 32 signals cover all major DAN variants. One of the most common enterprise AI misuse patterns.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 445ms
HTTP 403 • threat_detected • type: jailbreak_attempt • confidence: 94 • signals: [DAN, do_anything_now, no_restrictions]
PII — Social Security Number
SOC 2 GDPR Art. 9 LLM06
Ready
Ready
HR staff paste employee SSNs into an AI assistant to generate onboarding documents. SSN is the highest-sensitivity PII category — blocked before any LLM processes it.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 388ms
HTTP 403 • dlp_violation • pattern: PII - Identity • categories: [SSN] • matched: XXX-XX-XXXX format
Data exfiltration — URL injection
LLM01
Ready
Ready
Attacker embeds an exfiltration URL in a prompt — the model generates a response that sends conversation data to an external server via a markdown image tag. 25+ signals cover all exfiltration patterns.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 512ms
HTTP 403 • threat_detected • type: data_exfiltration • confidence: 91 • attacker URL never reached LLM
System prompt exfiltration
SOC 2 LLM01
Ready
Ready
Attacker attempts to extract the system prompt — which often contains proprietary business logic, customer data, and confidential configuration. 21 signals cover direct requests, roleplay extraction, and encoding bypass.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 434ms
HTTP 403 • threat_detected • type: system_prompt_exfil • confidence: 92 • system context protected
Compliance trigger — MNPI
SOC 2 LLM06
Ready
Ready
Financial employee pastes material non-public earnings information into an AI assistant before public announcement. SEC Regulation FD violation. Critical in financial services and healthcare M&A contexts.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked in 467ms
HTTP 403 • dlp_violation • pattern: Compliance - MNPI • compliance: [SEC_RegFD, SOC2_CC6.1] • flagged pre-announcement language
SEC Regulation FD SOC 2 CC6.1
Payment card data — PCI
PCI-DSS LLM06
Ready
Ready
A support agent pastes a full primary account number (PAN) into an AI assistant to draft a refund note. PCI-DSS prohibits transmitting cardholder data to unauthorized systems.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked
HTTP 403 • dlp_violation • pattern: Credit Card • PAN never reached the model
PCI-DSS 3.4 SOC 2 CC6.1
Secret leak — live API key
LLM06 SOC 2
Ready
Ready
A developer pastes a live provider API key into an AI assistant while asking for help. Keys sent to third-party models can be logged, cached, or exfiltrated.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked
HTTP 403 • dlp_violation • pattern: API Key OpenAI • credential intercepted pre-model
OWASP LLM06 SOC 2 CC6.1
Private key exfiltration
LLM06 SOC 2
Ready
Ready
An RSA private key is pasted into an AI tool for "formatting help." Private keys grant direct access to infrastructure and must never leave controlled systems.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked
HTTP 403 • dlp_violation • pattern: Private Key • key material never reached the model
OWASP LLM06 SOC 2 CC6.1
Database credentials in URL
LLM06 SOC 2
Ready
Ready
A production database connection string with embedded credentials is pasted into an AI assistant for debugging. Exposes direct, authenticated access to customer data.
Your setup — what happens
Run the scan to see live results from your endpoint.
With membrAIn — blocked
HTTP 403 • dlp_violation • pattern: Database URL • credentials intercepted pre-model
SOC 2 CC6.1 OWASP LLM06
--
Your risk score
Run scan to see
DEPLOY MEMBRAIN
0
With membrAIn
12/12 blocked or redacted
You just saw 12 of 102 scenarios.

The full professional assessment runs all 102 scenarios — systematically testing every detection pattern we ship. Each finding maps to HIPAA, SOC 2, or EU AI Act sections. Output is a signed PDF your compliance officer hands to an auditor.

102 scenarios
HIPAA • SOC 2 • EU AI Act mapped
Ed25519-signed PDF output
Before/after comparison included
All 102 scenarios including industry-specific Per-finding remediation steps Before/after comparison report Free for pilot organizations
Every block creates a signed audit event
The membrAIn column above doesn't just show "blocked" — each block writes a tamper-evident Ed25519-signed event to a cryptographic audit chain. Verify it offline without trusting membrAIn infrastructure.
verify audit chain
# Pull demo audit events and verify chain integrity curl -s "https://gateway.getmembrain.ai/c/acct_cZdWrJIXPRyl/audit?limit=10" \ -H "x-api-key": "mbr_live_demo_PLACEHOLDER_xxxxxxxx" > events.ndjson curl -s "https://gateway.getmembrain.ai/c/acct_cZdWrJIXPRyl/audit-publickey" > pubkey.json node verify-chain.js events.ndjson pubkey.json # Chain valid. 10/10 signatures verified. No tampering detected.