Configure Detection Rules

Set what ZeusLock detects and what it does on the Rules page: the three modes (Disabled, Alert, Block), why they matter, the built-in rule groups, and how to save your changes.

Detection rules decide what ZeusLock looks for and what happens when it finds it. Rules live inside policies — open Policies in the sidebar and edit a policy to see its ruleset. Editing the Default Policy changes detection for everyone not covered by another policy (see Create & Manage Policies). Every data type can be set to one of three modes.

The three modes

  • Disabled (Off) — the data type is ignored. Prompts that contain it pass through untouched. Use this for things you do not need to watch.
  • Alert — ZeusLock detects it and warns the user, showing an anonymized preview they can send instead, or cancel. You get full visibility and the sensitive value is protected, without hard-blocking anyone. This is the mode that anonymizes.
  • Block — ZeusLock detects it and stops the send entirely. Nothing leaves the device.

Block is available on the Business and Enterprise plans.

Why the modes matter

They let you balance visibility against friction. Disabled is a blind spot; Alert gives you visibility plus soft protection while people keep working; Block is hard protection for the data you can never let out.

The built-in rules

ZeusLock ships ready-made detectors, grouped by type:

  • Financial Data — Credit cards (Visa, Mastercard, Amex), IBAN / RIB, Crypto wallets (Bitcoin, Ethereum).
  • Secrets & Credentials (Critical) — API keys (AWS, Stripe, OpenAI…), Passwords, JWT tokens.
  • Personal Data — Phone numbers (FR & international), Social Security Number (French NIR), Postal addresses, Passport / ID number.
  • Source Code & Infra — Source code, Connection strings (database URLs), Internal IP addresses.

Set a mode and save

For each rule, click Off, Alert, or Block, then save. Changes to the Default Policy apply to the whole organization right away; other policies re-publish through Simulation, so a bad change can never silently block a team. You can also add custom rules and give different teams different rulesets with groups.