Providing a lens into PII data handling and third-party data flows early in development
Pricing Plans
Sensitive Data Leak Detection
(trace sensitive data flows across transformations in code to catch PII and PHI leaks in risky data sinks such as logs, files, local storage, third-party SDKs, and AI integrations before code is pushed to production)
[limited to specific programming languages and data sinks - see details]
Sensitive Data Mapping and Data Flow Visualization
(automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection)
[limited to specific programming languages and data sinks - see details]
Shadow AI Discovery
(uncover hidden or undocumented AI SDKs and abstractions in code and see exactly what sensitive data is being sent to them, even through complex transformations, to catch risks before data starts flowing)
Limited to OpenAI, Anthropic, and Gemini
IDE Plugins
(embed privacy in the earliest stages of development and catch sensitive data leaks as code is being written. Supports VS Code, Cursor, and IntelliJ)
CI/CD Integration
(e.g. GitHub Actions, GitLab CI/CD)
Support
GitHub Issues
Sensitive Data Leak Detection
(trace sensitive data flows across transformations in code to catch PII and PHI leaks in risky data sinks such as logs, files, local storage, third-party SDKs, and AI integrations before code is pushed to production)
Sensitive Data Mapping and Data Flow Visualization
(automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection)
Shadow AI Discovery
(uncover hidden or undocumented AI SDKs and abstractions in code and see exactly what sensitive data is being sent to them, even through complex transformations, to catch risks before data starts flowing)
Third Party Data Flows
(track sensitive data shared with more than 600 supported third party SDKs, regardless of how deeply nested the data flows are)
Automated Privacy Reporting
(generate RoPA, PIA, and DPIA reports that are pre-populated with real data flows and identified risks)
Compliance Frameworks
GDPR, CCPA, ISO 29100, NIST 800 53, HIPAA
Alerts & Issue Tracking
(get alerts in Slack or email for new sensitive data leaks, DPA violations, or when sensitive data elements are added to the codebase, and automatically create issues with full context in Jira or Linear)
IDE Plugins
(embed privacy in the earliest stages of development and catch sensitive data leaks as code is being written. Supports VS Code, Cursor, and IntelliJ)
CI/CD Integration
(e.g. GitHub Actions, GitLab CI/CD)
Security Dashboard Integrations
(e.g. GitHub Advanced Security Dashboard, GitLab Vulnerability Report)
Support
Dedicated support: 8x5 Email
Sensitive Data Leak Detection
(trace sensitive data flows across transformations in code to catch PII and PHI leaks in risky data sinks such as logs, files, local storage, third-party SDKs, and AI integrations before code is pushed to production)
Sensitive Data Mapping and Data Flow Visualization
(automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection)
Shadow AI Discovery
(uncover hidden or undocumented AI SDKs and abstractions in code and see exactly what sensitive data is being sent to them, even through complex transformations, to catch risks before data starts flowing)
Third Party Data Flows
(track sensitive data shared with more than 600 supported third party SDKs, regardless of how deeply nested the data flows are)
Automated Privacy Reporting
(generate RoPA, PIA, and DPIA reports that are pre-populated with real data flows and identified risks)
Compliance Frameworks
GDPR, CCPA, ISO 29100, NIST 800 53, HIPAA
Alerts & Issue Tracking
(get alerts in Slack or email for new sensitive data leaks, DPA violations, or when sensitive data elements are added to the codebase, and automatically create issues with full context in Jira or Linear)
IDE Plugins
(embed privacy in the earliest stages of development and catch sensitive data leaks as code is being written. Supports VS Code, Cursor, and IntelliJ)
CI/CD Integration
(e.g. GitHub Actions, GitLab CI/CD)
Security Dashboard Integrations
(e.g. GitHub Advanced Security Dashboard, GitLab Vulnerability Report)
Automated CI Configurations
(integrates with GitHub, GitLab, and Bitbucket (cloud and enterprise) to push CI configurations, with support for self-hosted runners and granular controls for scan frequency, pull request comments, and blocking)
Managed Scans
(integrates with GitHub, GitLab, and Bitbucket (cloud and enterprise) to offload scanning to HoundDog.ai, with on-premises scans handled through the secure HoundDog.ai Broker)
Support
Priority support with SLA: Email and dedicated private Slack channel
Sensitive Data Leak Detection
(trace sensitive data flows across transformations in code to catch PII and PHI leaks in risky data sinks such as logs, files, local storage, third-party SDKs, and AI integrations before code is pushed to production)
[limited to specific programming languages and data sinks - see details]
Sensitive Data Mapping and Data Flow Visualization
(automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection)
[limited to specific programming languages and data sinks - see details]
Shadow AI Discovery
(uncover hidden or undocumented AI SDKs and abstractions in code and see exactly what sensitive data is being sent to them, even through complex transformations, to catch risks before data starts flowing)
Limited to OpenAI, Anthropic, and Gemini
Third Party Data Flows
(track sensitive data shared with more than 600 supported third party SDKs, regardless of how deeply nested the data flows are)
Automated Privacy Reporting
(generate RoPA, PIA, and DPIA reports that are pre-populated with real data flows and identified risks)
Compliance Frameworks
GDPR, CCPA, ISO 29100, NIST 800 53, HIPAA
Alerts & Issue Tracking
(get alerts in Slack or email for new sensitive data leaks, DPA violations, or when sensitive data elements are added to the codebase, and automatically create issues with full context in Jira or Linear)
IDE Plugins
(embed privacy in the earliest stages of development and catch sensitive data leaks as code is being written. Supports VS Code, Cursor, and IntelliJ)
CI/CD Integration
(e.g. GitHub Actions, GitLab CI/CD)
Security Dashboard Integrations
(e.g. GitHub Advanced Security Dashboard, GitLab Vulnerability Report)
Automated CI Configurations
(integrates with GitHub, GitLab, and Bitbucket (cloud and enterprise) to push CI configurations, with support for self-hosted runners and granular controls for scan frequency, pull request comments, and blocking)
Managed Scans
(integrates with GitHub, GitLab, and Bitbucket (cloud and enterprise) to offload scanning to HoundDog.ai, with on-premises scans handled through the secure HoundDog.ai Broker)
Support
GitHub Issues
Dedicated support: 8x5 Email
Priority support with SLA: Email and dedicated private Slack channel
HoundDog.ai CLI Scanner
(available on GitHub)
Free
Start FreeSensitive Data Leak Detection
(catch PII and PHI leaks in risky data sinks such as logs, files, local storage, third-party SDKs, and AI integrations before code is pushed to production)
Extensive pre-defined sensitive data definitions covering PII, PHI, CHD, and auth tokens. See the full list here
Free
Starter
Enterprise
Comprehensive rules that detect sensitive data exposures across logs, files, local storage, APIs, third-party SDKs, and AI abstractions, no matter how deeply nested the data flows are.
Define custom sensitive data types for your organization and adjust the sensitivity levels of built in definitions.
Free
Starter
Enterprise
Apply precise allowlists across logs, files, local storage, 600+ third-party SDKs, and AI integrations to enforce your organization’s privacy policies and Data Processing Agreements. Block risky code in your CI pipeline before it is pushed to production and before any data starts flowing.
Free
Starter
Enterprise
Sensitive Data Mapping and Data Flow Visualization
(evidence-based data maps that show where sensitive data is collected, processed and shared, including through third-party SDKs and AI integrations)
Evidence-based Sensitive Datamap
Automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection
Free
Point-in-time view in the Markdown fileStarter
Continuously updated with code changesEnterprise
Continuously updated with code changesView evidence-based sensitive data maps by code repository, by data element (for example, all code repositories processing Social Security numbers), or by data sink (all code repositories exposing sensitive data in LLM prompts)
Free
Starter
Enterprise
Set up alerts when new data elements are introduced based on their sensitivity levels
Free
Starter
Enterprise
Sensitive Data
Flow Visualization
Visualize sensitive data flows across databases, logs, local storage, third party services, AI SDKs, and APIs with direct links to the exact lines of code where risks are detected
Free
Point-in-time view in the Markdown fileStarter
Continuously updated with code changesEnterprise
Continuously updated with code changesProactive Privacy Compliance
Generate RoPA, PIA and DPIA
Generate audit ready Records of Processing Activities (RoPA), Privacy Impact Assessments (PIAs), and Data Protection Impact Assessments (DPIAs), pre-populated with detected data flows and privacy risks aligned with GDPR, CCPA, ISO 29100, NIST 800 53, and HIPAA
Free
Starter
Enterprise
Proactive Alerts
Receive proactive Slack or email alerts for new sensitive data leaks in risky sinks or when third party and AI data sharing violates your DPAs or privacy notice, all caught in development before code reaches production and before data starts flowing
Free
Starter
Enterprise
Receive proactive Slack or email alerts when code changes introduce new sensitive data types based on their sensitivity level
Free
Starter
Enterprise
CI/CD Integration
GitHub Actions
Free
Starter
Enterprise
GitLab CI/CD
Free
Starter
Enterprise
CircleCI
Free
Starter
Enterprise
Azure Pipelines
Free
Starter
Enterprise
Jenkins
Free
Starter
Enterprise
Bitbucket Pipelines
Free
Starter
Enterprise
Security Dashboard Integrations
Surface findings in existing security dashboards
GitHub Advanced Security Dashboard
Free
Starter
Enterprise
GitLab Security Dashboard
Free
Starter
Enterprise
Other
Single Sign On (SSO)
Free
Starter
• SAML SSO• Okta, Microsoft Entra ID, and others
Enterprise
• SAML SSO• Okta, Microsoft Entra ID, and others
Audit Logs
Free
Starter
Standardized audit logs for consumption in SIEMEnterprise
Standardized audit logs for consumption in SIEMAlerts & Notifications
Free
Starter
Get alerts based on the severity of detected issues in email or on SlackEnterprise
Get alerts based on the severity of detected issues in email or on SlackIssue Tracking
Free
Starter
Take actions on detected issues by automatically submitting tickets on Jira, Linear and other issue tracking platformsEnterprise
Take actions on detected issues by automatically submitting tickets on Jira, Linear and other issue tracking platformsAutomated CI Configurations
Free
Starter
Enterprise
Integrate with GitHub, GitLab, and Bitbucket (cloud and enterprise) to push CI configurations, with support for self-hosted runners and granular controls for scan frequency, pull request comments, and blockingManaged Scans
Free
Starter
Enterprise
Integrate with GitHub, GitLab, and Bitbucket (cloud and enterprise) to offload scanning to HoundDog.ai, with on-premises scans handled through the secure HoundDog.ai BrokerSupport
Free
Starter
Dedicated support: 8x5 EmailEnterprise
Priority support with SLA: Email and dedicated private Slack channelHoundDog.ai CLI Scanner
(available on GitHub)
Free
Start FreeExtensive pre-defined sensitive data definitions covering PII, PHI, CHD, and auth tokens. See the full list here
Comprehensive rules that detect sensitive data exposures across logs, files, local storage, APIs, third-party SDKs, and AI abstractions, no matter how deeply nested the data flows are.
Define custom sensitive data types for your organization and adjust the sensitivity levels of built in definitions.
Apply precise allowlists across logs, files, local storage, 600+ third-party SDKs, and AI integrations to enforce your organization’s privacy policies and Data Processing Agreements. Block risky code in your CI pipeline before it is pushed to production and before any data starts flowing.
Evidence-based Sensitive Datamap
Automatically map and visualize where sensitive data is stored, processed, and shared across third-party services, AI SDKs, and APIs, using source code as auditable evidence for early risk detection
View evidence-based sensitive data maps by code repository, by data element (for example, all code repositories processing Social Security numbers), or by data sink (all code repositories exposing sensitive data in LLM prompts)
Set up alerts when new data elements are introduced based on their sensitivity levels
Sensitive Data
Flow Visualization
Visualize sensitive data flows across databases, logs, local storage, third party services, AI SDKs, and APIs with direct links to the exact lines of code where risks are detected