GenGuard endpoint DLP (TAO)
How GenGuard inside Trustity Agent One protects the workstation - text, files, contexts, destination actions, Warn or Block - alongside the browser extension.
GenGuard endpoint DLP (Agent One)
GenGuard is one product with two enforcement surfaces that share portal policy and Live Events:
| Surface | Who enforces | What it covers |
|---|---|---|
| Browser (GenGuard + Agent One) | Chrome / Edge extension 3.4.5+ (Warn/coaching); with Agent One enrolled, license/policy/violations prefer the native bridge | Web pages, in-browser paste (keywords + named patterns), file upload / Browse / drag-drop, domains, categories, Shadow AI visits |
| Endpoint (GenGuard inside Agent One) | Windows session helper (4.0.3571+ for Warn; 4.0.3572+ for Medical / PHI; 4.0.3573+ for Local AI Runtime on classified FileGuard files; full text/files/contexts from 4.0.3522+; drag/Browse/typing harden 4.0.3540+) | Clipboard text, typed text, file clipboard / drag / Browse, contexts; named packs including medical_phi; FileGuard-classified files vs AI tools; actions Warn (coach + allow) | Block | Block with bypass |
Use the extension where browser workflows matter. Use TAO GenGuard where the whole workstation matters - messaging apps, IDEs, and other desktop destinations that never load the extension.
Dual model in one sentence
GenGuard with Agent One protects in the browser; GenGuard inside Agent One protects the workstation. Same portal knobs (keywords, named patterns, block-by-extension, Warn/Block) apply on both surfaces from GenGuard 3.4.5 + Agent One 4.0.3571+. See Shadow AI and Warn.
What endpoint GenGuard does
When GenGuard / Browser DLP is entitled and enabled, and keywords (and optional patterns) are configured:
- TAO watches the foreground process on Windows against curated AI/chat apps plus any Endpoint contexts you add.
- Text: if clipboard text matches a keyword or pattern while a covered app is focused, GenGuard applies the configured action. Warn (Agent One 4.0.3571+) shows a banner and allows the paste while raising
WARNED/clipboard_warn. Block clears the clipboard (clipboard_block). Typing into a covered app is gated best-effort (typed_warn/typed_block) on 4.0.3540+. - Files: if a copied, dialog-selected, or dragged file matches content policy or block-by-extension, Warn reports and allows; Block clears / cancels the transfer. Clean files are not blocked by content scan.
- Covered (TAO 4.0.3534+): Explorer Copy → Paste (CF_HDROP); context-app Open / Upload / paperclip file dialogs when the selected file matches policy.
- Covered (TAO 4.0.3540+): Explorer drag-drop into context apps and browsers (selection snapped at drag start on shell + OleGetClipboard/HDROP); broader Browse / Choose file path resolution (CDM_GETFILEPATH) including Electron desktop apps.
- Bypass (optional): when policy allows
block_with_bypass, the user sees a top GenGuard banner - dismiss and keep working, or enter an admin unlock code for a short exception - not a full VisionX workstation lock.
Web filtering, category blocks, and in-page paste/upload/drag in the browser stay with the GenGuard extension (3.3.1+ for named patterns, block-by-extension, and file content scan on Browse/drop). Endpoint GenGuard does not replace VisionX camera lock.
Configure contexts, text, and files
In Security Policies → GenGuard:
- Keywords - shared list with Whole words or Contains match mode, plus Import list (paste /
.txt/.csv). - Endpoint contexts - add process names (for example
Slack.exe) on top of curated apps. - Text - built-in detectors (credit card, keys, passwords, source code, medical PHI, IBAN, Israeli ID, connection strings), Reduce false positives (proximity), and optional Actions by destination (AI / chat vs other monitored apps).
- Files - enable file scanning; Source code also fills block-by-extension for code file types.
After save, the next TAO policy refresh writes browserDlp.endpoint (and related fields) under %ProgramData%\Trustity\TAO\browser-dlp-policy.json. The extension receives the same packs and controls via /api/genguard/policy or the TAO native bridge (4.0.3532+). Legacy policies without keywordMatch / proximity / destination overrides keep previous behavior.
Validate
- Save a distinctive test keyword (not a real secret) and enable Source code.
- On Windows with TAO 4.0.3532+ (or current GA) and GenGuard entitled, open a covered desktop app (for example WhatsApp Desktop or Cursor).
- Text: copy text containing the keyword or a code-like paste, focus the app - clipboard cleared; Live Events shows Endpoint.
- Files: copy a
.py/.ps1into the same app - blocked; copy a clean non-code file - allowed unless content matches keywords. - Browser: with GenGuard 3.3.1+, paste code-like text, Browse a keyword file, or drag-drop a file on chatgpt.com (when the site is not fully category-blocked) - extension blocks and raises a Live Event (Via TAO or Direct).
- Desktop drag / Browse: with TAO 4.0.3540+, drag a keyword
.txtfrom Explorer onto ChatGPT Desktop, or use in-app Browse / paperclip - transfer canceled; Live Events shows Endpoint. On 4.0.3582+, the same check reads Word, Excel, PowerPoint, PDF, and pictures. Office apps do not need to be installed. Pictures and scanned PDFs use Windows text recognition, including Hebrew when that language is installed. Open greys out while a picture or PDF is still being read.
Uploads use the GenGuard outbox and are not gated by the portal heartbeat interval.
Classified files
When FileGuard has labeled a file, the browser extension holds a paste, drop, or file picker until TAO answers. That includes images and PDFs. Word, Excel, and PowerPoint text is checked in the extension. The page does not receive a labeled file.
On Agent One 4.0.3573+, Local AI Runtime also applies your FileGuard Local AI mode when a classified file meets a curated AI tool on GenGuard file surfaces (clipboard / drag / open dialog). See Local AI Runtime.
A masked excerpt and the discovery list live under FileGuard, not in this Live Events view. See FileGuard overview.