# Sether

> Sether provides local privacy tools built on free MIT PII-redaction libraries by Raeven Company LTD. It detects personal data (emails, phone numbers, payment cards, IBANs, names, API keys and other secrets) in text, replaces each value with a random token or a realistic decoy before the text reaches an LLM, and restores the original values in the model's reply. Processing runs locally in your process, browser or editor.

Pricing in one line: full npm and PyPI libraries stay free under MIT, including decoy and restore, with no Sether usage quota. Official tools offer Free scan, mask, token replacement and all restore of known mappings. New licensed releases add optional Sether Pro: realistic decoys and custom watchlists, plus custom rules in Shield, bundled for one person across Shield and the editor. The Pro pilot is $5 for one month or $48 for one year, manual renewal with no automatic charge. Install a compatible build before explicitly starting the seven-day, no-card trial. Expiry returns to Free and does not lock existing known-mapping restore. Current store builds may retain legacy free features. Hosted Gateway is separate early access and not generally available.

## Products

- [Sether Shield](https://sether.ai/shield): Local prompt scanning, masking, token replacement and known-mapping restore. New official releases add optional Pro decoys, custom watchlists and rules. Current store builds may retain legacy free features. Status: Live on the Chrome Web Store. Price: Free + optional Pro.
- [Sether for VS Code](https://sether.ai/vscode): Local findings, masks, token replacement and restore for AI coding workflows. New official releases add Pro decoys, custom watchlists in the same user bundle as Shield. The editor source remains MIT licensed. Status: Live on the VS Code Marketplace. Price: Free + optional Pro. Install: `code --install-extension GodfreyLebo.sether`.
- [Sether Hooks](https://sether.ai/hooks): Stops a prompt that carries personal data or a secret before Claude Code, Codex or Gemini CLI sends it to the model, and shows a clean version to send instead. Runs locally with no network calls. Status: Coming soon. Price: Free · MIT.
- [Sether for TypeScript](https://sether.ai/docs): Streaming redact and restore between your app and any LLM. Chunk-boundary safe, SSE aware, with fetch, Express, OpenAI and Anthropic wrappers. New in 0.8.0: JSON-safe restore for tool-call arguments. Status: Live on npm. Price: Free · MIT. Install: `npm install @raeven-co/sether`.
- [Sether for Python](https://sether.ai/docs/python): The same engine and token format as the npm package, with sync and async streaming plus ASGI, WSGI, httpx, OpenAI and Anthropic helpers. New in 0.4.0: JSON-safe restore and decoy mode. Status: Live on PyPI. Price: Free · MIT. Install: `pip install sether`.
- [sether-ner](https://sether.ai/docs#ner): Local named-entity recognition for names, organisations and locations in plain sentences. Runs a small model in your process, no API calls. Status: Live on npm. Price: Free · MIT. Install: `npm install @raeven-co/sether-ner @huggingface/transformers`.
- [Sether for n8n](https://github.com/raeven-co/n8n-nodes-sether): Redact, Restore and Validate Tool Call nodes. Keep customer data tokenised through an AI workflow and block tool calls that try to use values they were never given. Status: Beta · install from GitHub. Price: Free · MIT.
- [Sether Gateway Guard](https://github.com/raeven-co/sether-gateway-guard): An OpenAI-compatible hop you run yourself. Tokenises every message, restores replies and gates tool calls with a default-deny policy file. Status: Beta · self-host from GitHub. Price: Free · MIT.
- [Sether Gateway (hosted)](https://sether.ai/pricing): A proposed managed redaction and restore endpoint for teams that prefer hosted infrastructure. Separate from the finished-tool Pro bundle; not generally available. Status: Early access. Price: Separate early access.

## Key facts

- npm package: @raeven-co/sether, version 0.8.0, 252 tests, 224 detection patterns all checked for ReDoS, 1 runtime dependency.
- PyPI package: sether, version 0.4.0. Same engine and token format as the npm package.
- Developer-library license: full MIT. Source: https://github.com/raeven-co/sether. The editor source also remains MIT; official-tool Pro licensing does not change these grants.
- Token format: <TYPE_uuid>, for example <EMAIL_3f2a9c1e-...>. Each match gets a random token, and only your vault can map it back to the original.
- Decoy mode replaces supported values with realistic stand-ins, using test ranges where available. Restore requires the original mapping. Decoy mode is included in the free MIT libraries and is a Pro feature in new licensed official tools.
- Privacy: prompt, reply, file and mapping processing stays local in the tools. New licensed clients contact Sether for account and license metadata, not prompts, mappings or watchlist contents. Demo use and account creation do not start a trial.
- Certifications: none today. Sether does not hold a SOC 2 report.
- Limitations: detection covers supported types, not every private detail; names in plain sentences need sether-ner; Shield runs in desktop Chrome only; restore needs the matching mapping. Full list: https://sether.ai/limitations
- Founder: Godfrey Lebo (https://sether.ai/about). Company: Raeven Company LTD, Abuja, Nigeria.

## Pages

- [Product overview](https://sether.ai): What Sether is, how a prompt is redacted and restored, every product, pricing and FAQ
- [Sether Shield for Chrome](https://sether.ai/shield): Local browser privacy tools: Free essentials, optional Pro in new releases; current store builds may retain legacy free features
- [Sether for VS Code](https://sether.ai/vscode): Editor extension that flags secrets and copies scrubbed snippets for AI assistants, live on the VS Code Marketplace
- [Pricing](https://sether.ai/pricing): Full MIT libraries stay free; official tools have Free essentials and optional Pro, with a seven-day opt-in pilot trial and manual renewal
- [TypeScript docs](https://sether.ai/docs): Install, quickstart, detectors, decoy mode, streaming, middlewares and audit events for @raeven-co/sether
- [Python docs](https://sether.ai/docs/python): pip install sether: sync and async streaming, ASGI, WSGI, httpx, OpenAI and Anthropic helpers
- [Blog](https://sether.ai/blog): Guides and comparisons on PII redaction for LLM applications
- [Sether Hooks (coming soon)](https://sether.ai/hooks): Local prompt hook that stops prompts with personal data or secrets before Claude Code, Codex or Gemini CLI sends them
- [News](https://sether.ai/news): Research, analysis and release announcements, labelled by type
- [Roadmap](https://sether.ai/roadmap): What shipped recently, what is in testing, what comes next, and what is not planned, with reasons
- [Limitations](https://sether.ai/limitations): What Sether does not catch or promise today, by product
- [About and team](https://sether.ai/about): Who builds Sether, what we believe, and how to partner with us
- [Editorial policy](https://sether.ai/editorial-policy): How articles are labelled, checked, disclosed and corrected
- [Live sandbox](https://sether.ai/sandbox): Browser demo of redaction, no signup, nothing leaves the device
- [Server playground](https://sether.ai/playground): Round trip through the real npm package on our server
- [Demo decks](https://sether.ai/demos): Interactive slide decks on GDPR, redaction and streaming
- [Privacy](https://sether.ai/privacy): How this site handles personal data
- [Terms](https://sether.ai/terms): Terms of use

## Roadmap (last reviewed 2026-10-25)

- Shipped recently: Shield 0.5.3: fixes for ChatGPT's new composer; JSON-safe restore in TypeScript 0.8 and Python 0.4; Sether for VS Code on the Marketplace; sether-ner, early release; n8n node and Gateway Guard, in beta.
- Building now: Sether Hooks for Claude Code, Codex and Gemini CLI; Pro pilot builds of Shield and VS Code; African national ID numbers.
- Next: Vault adapters for Redis and Postgres; Published benchmarks against Microsoft Presidio; Unicode-aware email detection; sether-ner from early release to stable.
- Later: Hosted gateway: stored audit trail, SIEM export and compliance reports.
- Not planned, and why: Intercepting your network traffic; "Zero-knowledge" claims; Guessing traits from a name; Rewriting your prompt with another AI; A phone app, for now.
- Details: https://sether.ai/roadmap

## Articles

- [A quote in a name could add a bcc to an AI tool call. Here is the fix in Sether 0.8.0.](https://sether.ai/blog/sether-0-8-0-json-safe-restore): Sether 0.8.0 fixes JSON restore injection paths. See the affected scope, JSON-aware APIs, strict mode, runnable examples and upgrade limits. Markdown: https://sether.ai/blog/sether-0-8-0-json-safe-restore.md
- [A quote in a name could add a bcc to an AI tool call. Here is the fix in Sether for Python 0.4.0.](https://sether.ai/blog/sether-python-0-4-0-json-safe-restore): Sether Python 0.4.0 adds JSON-safe restore and strict token handling. Review the fix, runnable examples and structured-stream upgrade limits. Markdown: https://sether.ai/blog/sether-python-0-4-0-json-safe-restore.md
- [PII redaction for LLM applications: the complete guide (2026)](https://sether.ai/blog/pii-redaction-for-llm-apps-complete-guide): Design an LLM redaction flow: detection, local mappings, reply restore, streaming limits and practical acceptance checks for your application. Markdown: https://sether.ai/blog/pii-redaction-for-llm-apps-complete-guide.md
- [How to redact PII in JSON and structured data before sending it to an LLM](https://sether.ai/blog/redact-pii-in-json-before-llm): Redact supported personal values in JSON, verify syntax and coverage, then restore replies safely with JSON-aware APIs in TypeScript and Python. Markdown: https://sether.ai/blog/redact-pii-in-json-before-llm.md
- [Tokenize PII before AI document generation: keep real customer data out of the model](https://sether.ai/blog/tokenize-pii-before-ai-document-generation): Separate AI drafting from sensitive field insertion. Use typed replacements, validate the draft and restore known mappings at document rendering. Markdown: https://sether.ai/blog/tokenize-pii-before-ai-document-generation.md
- [How to redact PII before sending prompts to OpenAI (TypeScript)](https://sether.ai/blog/redact-pii-before-openai-typescript): Integrate Sether in a TypeScript LLM request path. Test detection, vault sharing, streaming boundaries and JSON-aware reply restoration. Markdown: https://sether.ai/blog/redact-pii-before-openai-typescript.md
- [How to redact PII from LLM prompts in Python](https://sether.ai/blog/redact-pii-llm-prompts-python): Build a Python redact-and-restore flow with Sether. Check vault sharing, supported wrappers, streaming behavior and JSON-safe restoration. Markdown: https://sether.ai/blog/redact-pii-llm-prompts-python.md
- [Is it GDPR-compliant to send customer data to OpenAI?](https://sether.ai/blog/is-it-gdpr-compliant-to-send-customer-data-to-openai): An engineering guide to reviewing LLM data flows: GDPR scope, provider roles, retention, minimisation and evidence for qualified privacy advice. Markdown: https://sether.ai/blog/is-it-gdpr-compliant-to-send-customer-data-to-openai.md
- [Microsoft Presidio alternatives for Node.js and TypeScript (2026)](https://sether.ai/blog/lightweight-presidio-alternatives-typescript): Compare Presidio and Sether integration choices: detection fixtures, reversible operations, streaming, state and deployment boundaries. Markdown: https://sether.ai/blog/lightweight-presidio-alternatives-typescript.md
- [Reversible PII redaction: how redact-then-restore works](https://sether.ai/blog/reversible-pii-redaction-redact-restore): How typed tokens and a retained vault support reply restoration, with practical checks for expired mappings, JSON output and tool authorization. Markdown: https://sether.ai/blog/reversible-pii-redaction-redact-restore.md
- [How to stop pasting sensitive data into ChatGPT (without banning it)](https://sether.ai/blog/stop-pasting-sensitive-data-into-chatgpt): Review sensitive drafts with Sether Shield: local text processing, Free essentials, optional Pro workflows and the limits of browser-side controls. Markdown: https://sether.ai/blog/stop-pasting-sensitive-data-into-chatgpt.md
- [The chunk-boundary bug: why streaming PII redaction is hard](https://sether.ai/blog/streaming-llm-redaction-chunk-boundary-bug): Why per-chunk scanning misses split values, how bounded buffering helps and which encoding, transport and long-input cases to test. Markdown: https://sether.ai/blog/streaming-llm-redaction-chunk-boundary-bug.md
- [Regex vs NER for PII detection: when patterns aren't enough](https://sether.ai/blog/regex-vs-ner-pii-detection): Evaluate patterns, labels, known terms and NER for PII detection. Build representative fixtures and review local model deployment boundaries. Markdown: https://sether.ai/blog/regex-vs-ner-pii-detection.md
- [How I took my npm package's supply-chain score from 78 to zero alerts](https://sether.ai/blog/npm-supply-chain-zero-alerts-socket): A June 2026 Sether hardening account: dependency provenance, scanner limits, SDK wrapper types and practical checks for the release you deploy. Markdown: https://sether.ai/blog/npm-supply-chain-zero-alerts-socket.md

## Optional

- [Full text of every article](https://sether.ai/llms-full.txt)
- [Sitemap](https://sether.ai/sitemap.xml)
- [RSS feed](https://sether.ai/blog/feed.xml)

Not product documentation: /admin, /account, /api, /cards, /clips, /pitch, /pay.