Keep source code, secrets, and IP protected
Protect repositories, credentials, designs, research, technical documentation, and proprietary strategy across developer tools, AI, cloud apps, email, and removable media.
Detection:
credentials Shared with personal coding assistant
An engineer copied authentication code containing an embedded API credential from a corporate repository into a personal Cursor AI coding assistant.
User
Jordan Jones
Software engineer
@jordan-jones-dev
Source/destination
Corporate IDE
Managed
Cursor
Unmanaged
Data shared
auth-provider.ts
Code snippet
Limited code, non-production test credential
Risk/Action
Prompt paused. user coached. workflow redirected.
Secure innovation across every workflow
Recognize organizational IP
Classify proprietary code, designs, technical documents, and business information beyond generic patterns.
Detect secrets in context
Identify credentials, tokens, keys, and infrastructure details inside files, fragments, and prompts.
Trace content to its source
Connect copied or transformed content to its originating repository, file, or project.
Cover developer destinations
Apply controls across AI coding tools, repositories, browsers, SaaS, email, cloud storage, and USB.
Incident trace:
Limited code fragment copied from the IDE, including a non-production test credential
Corporate IDE
Managed
Detection via:
Endpoint Sensor
Build source context
Classification
identity
environment
identity
environment
Link pasted into WhatsApp web conversation with approved recipient.
Cursor
Unmanaged
Detection via:
Browser extension
Analyze movement
Action
destination
behavior
destination
behavior
Generate verdict...
Prompt paused.
Enforce verdict
Prompt paused
user coached
workflow redirected
user coached
workflow redirected
Incident Analisys report
LLM ClassIfication100%
auth-provider.tsCode snippetLimited code fragment, including a non-production test credentialconfidentialSource CodeTest CredentialIPUser & Role100%
Jordan JonesSoftware engineer with authorized repository accessEnvironment100%
Managed developer endpoint; corporate GitHub and IDE sessions; personal, unmanaged Cursor account.Data lineage100%
- Managed developer endpoint
- Corporate GitHub and IDE sessions
- personal WhatsApp Web
- unmanaged Cursor account
Behavior100%
A limited proprietary code fragment containing a non-production credential was moved into a personal AI account.Risk100%
the snippet is limited, the credential is non-production, and the user is authorized, but the destination is a personal, unmanaged AI account.Medium
Full context, understood and acted on in real time.
ORION understands data and protects it the moment it moves. What it is, where it came from, who is moving it, where it is going, and whether that behavior makes sense. The result is accurate real time verdicts that prevent data loss.
status...100%
Stop code and secrets from leaving trusted environments.
Book 30 minutes with an agentic DLP expert.

Explore data movement case files
Customer data pasted into a personal ChatGPT account
Source code sent to personal email
Confidential file link shared via WhatsApp
Credentials shared with personal coding assistant
Confidential file download to unmanaged device











