AI Firewall & Internet Access

You decide when and how your AI communicates with the internet, using domain whitelisting, DLP inspection, and complete logging.

Uncontrolled AI Internet Access

  • AI systems send data to external servers without control
  • No transparency over outgoing requests and data flows
  • Sensitive company data can leak through prompts to external APIs
  • No control over which external sources the AI uses

ThinkLocAI AI Firewall

  • Domain whitelisting: only approved targets are reachable
  • DLP inspection of all outgoing requests for sensitive data
  • Complete audit trail of all internet communication
  • Offline by default, with internet access only after explicit approval

Interactive Demo

ThinkLocAI - AI Firewall Monitor

Firewall Rules

wikipedia.org

Knowledge source

ALLOW

arxiv.org

Research

ALLOW

openai.com

External AI service

BLOCK

google.com/search

Search engine

BLOCK

intern.firma.de

Intranet

ALLOW

unknown-tracker.io

Unknown

BLOCK

Live Traffic

AI
Firewall
Internet
14:32:01ALLOWwikipedia.org/api
14:32:03BLOCKanalytics.tracker.io
14:32:05DLParxiv.org/search
14:32:07BLOCKopenai.com/v1/chat
14:32:09ALLOWintern.firma.de/docs
DLP active

Outgoing requests are inspected for sensitive data. No company data leaves the network.

Transparency notice: this demo is a simulation using prepared sample data and does not show output from a live AI model. Labelled in line with Art. 50 of Regulation (EU) 2024/1689.

Features in Detail

Domain Whitelisting

Define exactly which domains the AI can reach. All unapproved targets are automatically blocked.

DLP Inspection (Data Loss Prevention)

Every outgoing request is inspected for sensitive company data. Personal data, contract content, and trade secrets are automatically filtered.

Traffic Logging

All inbound and outbound connections are recorded, with user, time, and requested source.

Proxy Configuration

All internet requests are routed through your corporate proxy and therefore through your existing network security.

Offline by Default

ThinkLocAI runs completely without internet. Internet access is optional and must be explicitly enabled and configured.

Real-Time Monitoring

Dashboard for outgoing traffic, with alerts on unusual patterns or attempts to reach unapproved targets.

Technical Details

Network Control

  • Domain whitelisting with wildcard support
  • IP range filtering
  • Port restrictions
  • Protocol filtering (HTTP/HTTPS)

DLP & Privacy

  • Pattern-based data detection
  • PII filtering (names, emails, IBANs)
  • Regex-based custom rules
  • Confidentiality level management

Monitoring & Audit

  • Real-time traffic dashboard
  • Complete request/response logs
  • Alert notifications
  • Export for SIEM integration

Use Cases

Controlled Web Research

The AI can search approved knowledge sources such as Wikipedia or industry portals without company data leaving the network.

Regulated Industries

Financial institutions and government agencies can granularly control internet access and fully document all data flows.

Air-Gap with Exceptions

Run ThinkLocAI in air-gap mode and enable individual sources selectively. Every access is logged.

Walk through access rules in a demo

We show you how to approve domains, create DLP rules, and review the logs.