When your employees use public foundation models such as ChatGPT, Claude, or Google Gemini, Aiceberg automatically inspects all incoming and outgoing traffic to detect potential exposure or disclosure of sensitive information. It continuously evaluates and constrains the scope of interactions, ensuring precise control over language, intentions, tasks, and instructions.
Aiceberg integrates with your existing firewall (Palo Alto, F5, Zscaler, Fortinet, Check Point, etc.) via the ICAP (Internet Content Adaptation Protocol). In this configuration, Aiceberg functions as the ICAP server, while your firewall operates as the ICAP client.
Once ICAP is enabled on your firewall, you can define which destinations should be subject to inspection (e.g., GPT, Claude, Gemini, Perplexity, etc.). Any traffic between your users and these services is analyzed by Aiceberg, which signals your firewall whether a specific input or output is permissible. Alerts can be streamed directly to your SIEM for centralized monitoring and response. This setup is equally effective if you host your own models on-premises or in a private cloud environment.