Techcatalyst Guard — Technical Architecture & Security Deep Dive

Product version: 0.40.15

Techcatalyst Guard is a workstation-resident AI data-loss-prevention (AI-DLP) system: it detects, masks, and blocks sensitive data — credentials, private keys, tokens, and personal data — before that data reaches an AI coding tool, an AI agent, an MCP server, or the system clipboard, using kernel-level enforcement, zero-knowledge telemetry, and a fully on-premise control plane.

Start with Executive Technical Overview, or the table of contents.

Contents

• Threat Model
• Architecture Overview
• Kernel-Level Enforcement · Interception & Proxying
• Detection Engine · Masking & Streaming Enforcement
• Policy Engine & Trust Chain · Zero-Knowledge Telemetry · Identity, Access & Fleet Operations
• Deployment & Infrastructure · Release History · Security of the Security Tool · Compliance & Traceability Methodology
• Glossary