Deep inspection, without decrypting anything

“FireAI looks at the very start of each connection to catch what an address alone can’t show. Nothing is stored or sent.” FireAI does not install a trusted root certificate and does not read the inside of an encrypted connection.

• Secure connections — reads the website name every encrypted connection announces before it’s encrypted (the TLS handshake), and blocks it if that name is on a threat list.
• Unencrypted secrets — blocks unencrypted web requests that carry card numbers, bank details, passwords or keys, before they leave this Mac.
• Hidden data in lookups — blocks a trick some tools use to smuggle data out disguised as a website-name lookup (DNS).