Extraction defense
What makes your AI product yours stays yours.
Garlic reads your usage logs to see how every account uses your AI product and flags extraction. In the founding pilot, it also plants canary facts that give you evidence if a clone ships. Built for AI startups, from pre-seed to Series A.
Not ready to share logs? The preview runs in your browser, works offline and never uploads your file. Then ask for the reviewed Score. During founding pilots, a person reviews every result. 5 founding pilots open now.
C
18% of its topics were asked by accounts showing extraction patterns.
-
10 accounts on 10 different networks use the same question wording and split your topics between them; 100% move on to a new topic; the timing between questions is regular, like a script. It asked 300 questions over 2.8 days.
-
67% of its questions reuse fixed wording with only the subject changed; 100% move on to a new topic; the timing between questions is regular, like a script; it covered 2.1 times as many of your topics as your typical heavy user. It asked 300 questions over 2 h 6 min.
-
85% of its questions reuse fixed wording with only the subject changed; 100% move on to a new topic. It asked 150 questions over 6.9 days.
-
Asked 164 questions in varied wording at a human pace, covering 10% of your topics. Heavy use, not extraction. Garlic leaves it alone.
The evidence
~24,000
fraudulent accounts generated more than 16 million exchanges with one frontier model to copy its capabilities.
+185%
growth in scraping in one year. It is now 70.9% of bad-bot traffic. DataDome, September 2026.
Today, security means keeping attackers out.
The people cloning your AI product are signed-in users.
Every answer your product gives reveals a little of its prompts, workflows and data. Enough answers, and a competitor can rebuild it. Nothing breaks, and nobody notices.
Layer 1
Surface
What your product says and how it says it. Easy to imitate, hard to own.
Layer 2 · what extraction targets
Behaviour
How it decides: edge cases, refusals, judgment calls. Your prompts and workflows.
Layer 3 · what extraction targets
Data
What it knows that others don’t. For many startups, the real moat.
Garlic turns your usage logs into evidence of who is extracting your product.
Step 1
Ask, then send 7 days of logs
We email the log format and a data processing agreement to sign. Then one export you already have: no SDK, no proxy, nothing in your request path.
Step 2
Your Garlic Score in 48 hours
Automated checks across every session, reviewed by a person before it reaches you.
Step 3
Act on it
Findings are evidence, not proof. If they show extraction, the founding pilot adds weekly scores, alerts and canary facts. The free Score commits you to nothing.
Mapmakers draw fake streets to catch copiers. Garlic does the same for your AI product.
Canary facts are unique, plausible details placed in your outputs. If a clone repeats one, you have evidence it came from you.
Share only wins
Show your customers you’re Garlicked.
Once your Garlic Score is strong, or has improved, you can display the Garlicked badge. It shows protection, never your findings. Your results stay private.
Coming to founding customers first.
Pricing
Pay for protection, not seats.
Founding pilot · 5 places
$1,500
90 days of Protect. Refundable within 14 days, no reasons needed. Credited in full to your first year.
Sold to businesses. Founding pilot terms
- A Garlic Score every week from your log export
- Extraction alerts when a pattern appears
- Canary facts for your outputs, with careful, human-approved checks of products you name
- Evidence reports for any confirmed pattern
- Direct access to the people building Garlic
After the pilot · Monitor
$500 / month
Extraction alerts. Includes 10,000 monthly active users, then $40 per 1,000.
After the pilot · Protect
$1,200 / month
Monitor, plus canary facts, evidence reports and the Garlicked badge. Includes 10,000 monthly active users, then $60 per 1,000.
Founding prices, kept for your first 12 months.
10 free Garlic Scores this week
Is your AI product Garlicked yet?
Tell us where to reach you. We’ll send the log format, you send 7 days of logs, and your Garlic Score comes back within 48 hours. It’s free, with no obligation to buy (terms).
Want to see it first? Run a preview on your own logs. It runs in your browser, works offline, and your file is never uploaded.
Prefer email? hello@garlic.is
Your data: we only analyse logs you own, under a data processing agreement we sign first. A named person at Garlic reviews them. We don’t send them to AI model providers, and we delete raw logs within 30 days of your report.
Questions
Is Garlic software or a service right now?
Software, with a person in the loop. Garlic’s analysis runs automatically. During founding pilots, a person reviews every result before it reaches you, and Garlic takes on more on its own only as its measured accuracy earns it. Evidence reports and anything that names another company are always signed off by a person.
Do you need access to my model or code?
No. Garlic works from a log export: timestamp, account, session and question text. No SDK and nothing in your request path.
What is a canary fact?
A unique, plausible but invented detail placed in your outputs. If a competitor’s product repeats it, that’s evidence the data came from you. It’s evidence, not legal proof.
How is this different from bot management or prompt guardrails?
Both keep attackers out. Bot tools judge traffic patterns and miss signed-in accounts asking plausible questions. Prompt guardrails judge one message at a time. Garlic looks at what each account asks across every session, which is where extraction shows up.
What should I remove from my logs first?
Names, emails and anything else that identifies your users. Pseudonymise account IDs and hash IP addresses. Garlic works on patterns, not identities.
Privacy notice
Draft for review. Last updated: 8 October 2026. Governed by UK law.
Garlic is a trading name of Gible Ltd, a company registered in England and Wales under company number 13860398, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Questions about your data: email hello@garlic.is or write to Gible Ltd at the registered office above.
Two roles, two sets of rules
When you visit our site, contact us or buy from us, Gible Ltd is the controller of your personal data. This notice covers that.
When you send us logs from your AI product for a Garlic Score or a pilot, those logs may contain your users' personal data. For that data, you are the controller and Gible Ltd is your processor. We only use it on your instructions, under the data processing agreement we sign with you. Your own privacy notice should tell your users you use Garlic to protect your service.
What we collect as controller
| Data | Where it comes from | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Name, work email, company, product URL | Forms, email, calls | To respond, deliver a Garlic Score and run a pilot | Steps before a contract, then the contract |
| Business contact details | Public sources such as company websites and professional profiles | To contact founders about Garlic | Legitimate interests: telling relevant businesses about a relevant service |
| Payment and invoice details | Stripe | To take payment and keep accounts | Contract; legal obligation for accounting records |
| Daily counts of visits to our pages, previews run (with the grade shown and a file-size band), and clicks on our sign-up and pilot buttons | Our website | To see which pages and steps are useful to founders | Legitimate interests |
| Which of our emails led to a visit or a sign-up: a short code in the link, the date and the page it opened | Links in our outreach emails | To see which emails are useful, and to stop sending ones that aren't | Legitimate interests |
| Call notes | Our calls with you | To understand your needs and improve Garlic | Legitimate interests |
We send business emails only to company addresses, always with a clear way to opt out, as UK electronic-marketing rules (PECR) require. Reply "stop" and we won't contact you again. Every outreach email says who we are and where we found your details, and you can object at any time by replying "stop" or writing to hello@garlic.is. If we can't tell whether an address belongs to a company or to an individual, we treat it as an individual's.
If we emailed you first
We sometimes email founders and teams of AI companies who have written publicly about copying, scraping, free-tier abuse or prompt leaks. If that's how you heard from us:
- What we hold: your name, your business email address, your company and role, the public post or page we read (its link and a short quote), where we found your address, the emails we exchanged and whether you asked us to stop.
- Where it came from: public sources only, such as your company website, imprint or contact page, or a post you published. Every email we send says where we found your details. We don't guess addresses or buy lists.
- Why, and our lawful basis: to tell businesses that may be exposed to extraction about a relevant service. Our basis is legitimate interests (UK GDPR Art. 6(1)(f)). We email company addresses only, one email and at most one follow-up.
- Who sees it: Google (Google Workspace, which stores and sends our email) and Anthropic, which provides the software we use to research public pages and draft emails. Neither receives customer logs. Both may process data in the US; see the transfers paragraph below.
- How long we keep it: up to 2 years after our last contact, like our other contact records. If you ask us to stop, we keep only your email address on a do-not-contact list, so that we never email you again.
- Your rights: you can object at any time, and we will stop: reply "stop" or write to hello@garlic.is. You also have the rights listed under "Your rights" below, and you can complain to the ICO. We make no automated decisions about you.
What we don't do
- We don't sell personal data.
- We don't use cookies, advertising trackers or third-party analytics on our site. We keep daily totals only: the event, the page, the date, and the short code if you came from one of our emails. We don't store your IP address or set anything in your browser. If your browser sends Global Privacy Control or Do Not Track, we count nothing.
- The Garlic Score preview runs entirely in your browser. The file you drop into it is not uploaded to us or anyone else. We count that a preview ran, with its grade and a file-size band, never the file or anything in it. If you choose to email us the signals it shows, we receive numbers and your verdicts only: no question text, account IDs or product name.
- In the founding pilot, we don't send customer logs to AI model providers. Garlic Score v0 runs deterministic checks on our own systems, and a named person at Garlic reviews the results.
Who we share it with
| Recipient | Purpose | Location and safeguard |
|---|---|---|
| Stripe | Payments | UK, EU and US; UK–US data bridge or international data transfer agreement |
| Google (Google Workspace) | Email, and encrypted storage of logs and reports | US and other countries; UK–US data bridge |
| Vercel | Hosting our website and passing sign-up requests and visit and link counts to our Google Workspace | US and other countries; UK–US data bridge |
| Google Fonts | Loading our website's typeface; Google receives your IP address | US; UK–US data bridge |
Some of these recipients are in the US. Where the recipient is certified, we rely on the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework). Otherwise we rely on the UK's international data transfer agreement or addendum, and we check that the protection your data receives is not materially lower than in the UK.
We may disclose data if the law requires it.
How long we keep it
- Contact and sales records: up to 2 years after our last contact.
- Invoices and payment records: 6 years, as UK tax law requires.
- Customer logs: as set out in our data processing agreement. By default, raw logs are deleted within 30 days of delivering a report, and we keep only derived signals.
Your rights
You can ask to access, correct, delete or restrict your data, object to our use of it (including for direct marketing, which we will always honour), and ask for a copy in a portable format. Email hello@garlic.is or write to Gible Ltd at our registered office. We reply within one month.
Complaints
If you're unhappy with how we handle your data, email hello@garlic.is, or write to Gible Ltd at our registered office. We accept complaints by any channel, acknowledge them within 30 days, look into them without undue delay, tell you the outcome and keep a record.
You can also complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix it first.
Changes
We'll update this notice as Garlic changes and show the date at the top.