Akamai Workforce Protector, formerly LayerX, is a browser extension that secures AI use and browser activity across many browsers. AILeakShield is also extension-based, and adds Microsoft 365 AI app governance, desktop AI discovery through log import or RMM, a NIST AI RMF assessment and staff policy acknowledgment.
What Akamai (LayerX) is: Akamai Workforce Protector, formerly LayerX: an agentless browser extension for AI usage control, browser and SaaS security, and last-mile DLP. Akamai completed its acquisition of LayerX on July 2, 2026.
Yes means documented. Partial means limited, an add-on, a separate product or preview. Not documented means we could not find it in the vendor's public documentation; it does not mean the vendor has tested and failed it.
| Capability | AILeakShield | Akamai Workforce Protector (LayerX) |
|---|---|---|
| Discover | ||
| AI websites used in the browser | YesBrowser extension for Chrome, Edge and Firefox with a risk-ranked AI catalog. | YesDetects AI tools by user and by corporate or personal account. |
| Desktop AI apps and coding tools | YesFirewall and DNS log import, plus RMM software inventory for MSPs (NinjaOne; ConnectWise, Datto, Kaseya and N-able in beta). | PartialCovers desktop apps built as progressive web apps; native desktop coverage described inconsistently. |
| AI apps connected to Microsoft 365 (OAuth) | YesRead-only Microsoft 365 connection lists AI apps users or admins have consented to. | Not documentedMicrosoft 365 OAuth app discovery not found in public materials. |
| AI agents | YesAI agent tools on desktops and AI agents connected to Microsoft 365, such as meeting bots. | YesIdentifies agentic browsers and separates human from agent activity. |
| Control | ||
| Block or restrict unapproved AI tools | YesIn the browser, through a firewall blocklist feed (Palo Alto EDL, FortiGate, pfBlockerNG, RPZ) and in Microsoft 365 consent. | YesRestricts shadow AI apps and blocks personal accounts. |
| Revoke AI app access in Microsoft 365 | YesAudited revoke of an AI app's Microsoft 365 grants. | Not documentedMicrosoft 365 OAuth grant revocation not found in public materials. |
| Protect | ||
| Inspect prompts for sensitive data | YesTyped and pasted prompt text, inspected before it is sent. | YesMonitors text input, paste, prompts and responses. |
| Inspect files uploaded to AI | YesFiles attached to AI prompts are inspected before send. | YesControls uploads and downloads. |
| Warn and require a typed justification | YesCoached warning; the reason is recorded in the audit log. | Not documentedCustom warning messages; a typed justification flow was not found. |
| Mask or redact sensitive values | PartialMasking is available in the AILeakShield secure AI workspace; on third-party AI sites the extension warns or blocks. | YesMasks sensitive data in prompts. |
| Custom sensitive terms | YesCustomer-defined terms such as project names and client lists. | PartialRegex conditions with PII, PCI, PHI and secrets presets. |
| Comply | ||
| Built-in NIST AI RMF assessment | YesIncluded in every subscription. | Not documentedNo NIST AI RMF assessment found. |
| AI policy library with staff acknowledgment | YesIndustry policy library with tracked staff acknowledgment. | Not documentedNo AI policy library with staff acknowledgment found. |
| Deploy and buy | ||
| No proxy, SSE or new browser required | Not requiredBrowser extension in the browsers staff already use, plus log import and a Microsoft 365 connection. | Not requiredBrowser extension only; supports Chrome, Edge, Firefox, Safari and agentic browsers. |
| Multi-tenant console for MSPs | YesPartner console with per-client isolation and policy templates. | Not documentedMulti-tenant MSP console not found in public materials. |
Akamai (LayerX): Akamai Workforce Protector is deployed as a browser extension through MDM or an identity provider, on managed and unmanaged devices. No proxy or network change is needed. Prices are not published.
AILeakShield: A browser extension for Chrome, Edge and Firefox, installed silently through Google Admin, Microsoft Intune, Group Policy or Jamf, plus firewall and DNS log import and an optional read-only Microsoft 365 connection. No proxy, no TLS inspection and no new browser. Everything is in one subscription, sold through IT providers and distribution including TD SYNNEX, with no seat minimum. Most organizations start in monitor mode.
More comparisons: All comparisons · AILeakShield vs Microsoft Purview · AILeakShield vs Netskope · AILeakShield vs Zscaler · AILeakShield vs Palo Alto Networks · AILeakShield vs Cisco · AILeakShield vs Check Point · AILeakShield vs Island · AILeakShield vs Harmonic · AILeakShield vs Prompt Security · AILeakShield vs Nightfall · AILeakShield vs Cyberhaven
Yes. LayerX is now Akamai Workforce Protector. Both use a browser extension rather than a proxy. AILeakShield adds Microsoft 365 AI app governance, desktop AI discovery, a NIST AI RMF assessment and staff policy acknowledgment.
Akamai completed its acquisition of LayerX on July 2, 2026, and now sells the product as Akamai Workforce Protector.
Chrome, Edge and Firefox, plus other Chromium browsers such as Brave and Opera.
From Akamai Workforce Protector (LayerX)'s public documentation and product pages, last checked October 21, 2026, with sources linked on this page. Where we could not find a capability documented, we say so rather than claiming it is missing. Vendors can contact us with corrections.
AILeakShield discovers all the AI in your environment, blocks the AI tools you have not approved, and keeps sensitive data out of the prompts sent to the ones you have.
