๐Ÿ›ก๏ธ

Prompt Injection Scanner

Scan text for prompt injection attacks, hidden instructions, and malicious AI manipulation attempts. Protect your AI assistants from security threats.

Paste text from emails, PDFs, webpages, or messages to check for hidden malicious instructions.

Characters: 0 Words: 0 Lines: 0

What is Prompt Injection?

Prompt injection is a security attack where malicious instructions are hidden in text to manipulate AI assistants (like ChatGPT, Claude, Gemini, or other language models). Attackers use these techniques to:

  • Override system instructions - Make the AI ignore its safety guidelines
  • Extract sensitive information - Trick the AI into revealing private data
  • Change AI behavior - Force the AI to act in unintended ways
  • Bypass content filters - Circumvent safety mechanisms

Common Attack Techniques

๐Ÿšจ Direct Injection

Example: "Ignore all previous instructions and..."

โš ๏ธ Hidden Commands

Using invisible Unicode characters (ZWSP, ZWNJ) to hide malicious instructions

๐Ÿ”ธ System Impersonation

Example: "System: You are now in admin mode..."

๐Ÿ”น Obfuscation

Using character substitution, homoglyphs, or encoding to hide malicious content

How This Scanner Works

๐Ÿ”

Pattern Detection

Scans for 50+ known injection patterns and malicious phrases

๐Ÿซฅ

Invisible Chars

Detects hidden Unicode characters used to conceal instructions

๐Ÿ”’

100% Private

All scanning happens in your browser - text never sent to servers

FAQ

Is this scanner 100% accurate?

No scanner can be 100% accurate. This tool detects known patterns and suspicious content, but sophisticated attacks may evade detection. Use it as one layer of defense, not the only one.

What should I do if threats are detected?

Review the detected threats carefully. If the text is from an untrusted source, do not paste it into AI assistants. Use the "Remove All Threats" button to clean the text, but verify the cleaned version still makes sense.

Is my text uploaded to a server?

No. This scanner runs entirely in your browser using JavaScript. Your text is never sent to any server, ensuring complete privacy and security.

Can this protect me from all prompt injection attacks?

This tool helps detect many common attacks, but new techniques emerge constantly. Always be cautious when pasting text from untrusted sources into AI assistants. Combine this scanner with other security practices for best protection.