Extraction defense
What makes your AI product yours stays yours.
Garlic watches how every account uses your AI product, flags extraction and plants canary facts that give you evidence when a clone ships. Built for AI startups, from pre-seed to Series A.
Garlic runs automatically. During founding pilots, a person also reviews every result. 5 founding pilots open now.
C
18% of its topics were asked by accounts showing extraction patterns.
-
10 accounts on 10 different networks use the same question wording and split your topics between them; 100% move on to a new topic; the timing between questions is regular, like a script. It asked 300 questions over 2.8 days.
-
67% of its questions reuse fixed wording with only the subject changed; 100% move on to a new topic; the timing between questions is regular, like a script; it covered 2.1 times as many of your topics as your typical heavy user. It asked 300 questions over 2 h 6 min.
-
85% of its questions reuse fixed wording with only the subject changed; 100% move on to a new topic. It asked 150 questions over 6.9 days.
-
Asked 164 questions in varied wording at a human pace, covering 10% of your topics. Heavy use, not extraction. Garlic leaves it alone.
The evidence
~24,000
fraudulent accounts generated more than 16 million exchanges with one frontier model to copy its capabilities.
+185%
growth in scraping in one year. It is now 70.9% of bad-bot traffic. DataDome, September 2026.
Today, security means keeping attackers out.
The people cloning your AI product are signed-in users.
Every answer your product gives reveals a little of its prompts, workflows and data. Enough answers, and a competitor can rebuild it. Nothing breaks, and nobody notices.
Layer 1
Surface
What your product says and how it says it. Easy to imitate, hard to own.
Layer 2 · what extraction targets
Behaviour
How it decides: edge cases, refusals, judgment calls. Your prompts and workflows.
Layer 3 · what extraction targets
Data
What it knows that others don’t. For many startups, the real moat.
Garlic turns your usage logs into evidence of who is extracting your product.
Step 1
Send 7 days of logs
One export you already have. No SDK, no proxy, nothing in your request path.
Step 2
Your Garlic Score in 48 hours
Automated checks across every session, reviewed by a person before it reaches you.
Step 3
Act on it
If it shows extraction, the founding pilot adds weekly scores, alerts and canary facts.
Mapmakers draw fake streets to catch copiers. Garlic does the same for your AI product.
Canary facts are unique, plausible details placed in your outputs. If a clone repeats one, you have evidence it came from you.
Share only wins
Show your customers you’re Garlicked.
Once your Garlic Score is strong, or has improved, you can display the Garlicked badge. It shows protection, never your findings. Your results stay private.
Coming to founding customers first.
Pricing
Pay for protection, not seats.
Founding pilot · 5 places
$1,500
90 days of Protect. Refundable within 14 days, no reasons needed. Credited in full to your first year.
- A Garlic Score every week from your log export
- Extraction alerts when a pattern appears
- Canary facts for your outputs, with careful, human-approved checks of products you name
- Evidence reports for any confirmed pattern
- Direct access to the people building Garlic
After the pilot · Monitor
$500 / month
Extraction alerts. Includes 10,000 monthly active users, then $40 per 1,000.
After the pilot · Protect
$1,200 / month
Monitor, plus canary facts, evidence reports and the Garlicked badge. Includes 10,000 monthly active users, then $60 per 1,000.
Founding prices, kept for your first 12 months.
10 free Garlic Scores this week
Is your AI product Garlicked yet?
Tell us where to reach you. We’ll send the log format, you send 7 days of logs, and your Garlic Score comes back within 48 hours.
Want to see it first? Run a preview on your own logs. It runs in your browser and your file is never uploaded.
Your data: we only analyse logs you own, under a data processing agreement we sign first. A named person at Garlic reviews them. We don’t send them to AI model providers, and we delete raw logs within 30 days of your report.
Questions
Is Garlic software or a service right now?
Software, with a person in the loop. Garlic’s analysis runs automatically. During founding pilots, a person reviews every result before it reaches you, and Garlic takes on more on its own only as its measured accuracy earns it. Evidence reports and anything that names another company are always signed off by a person.
Do you need access to my model or code?
No. Garlic works from a log export: timestamp, account, session and question text. No SDK and nothing in your request path.
What is a canary fact?
A unique, plausible but invented detail placed in your outputs. If a competitor’s product repeats it, that’s evidence the data came from you. It’s evidence, not legal proof.
How is this different from bot management or prompt guardrails?
Both keep attackers out. Bot tools judge traffic patterns and miss signed-in accounts asking plausible questions. Prompt guardrails judge one message at a time. Garlic looks at what each account asks across every session, which is where extraction shows up.
What should I remove from my logs first?
Names, emails and anything else that identifies your users. Pseudonymise account IDs and hash IP addresses. Garlic works on patterns, not identities.
Privacy notice
Draft for review. Last updated: 24 September 2026. Governed by UK law.
Garlic is a trading name of Gible Ltd, a company registered in England and Wales under company number 13860398, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Questions about your data: write to Gible Ltd at the registered office above.
Two roles, two sets of rules
When you visit our site, contact us or buy from us, Gible Ltd is the controller of your personal data. This notice covers that.
When you send us logs from your AI product for a Garlic Score or a pilot, those logs may contain your users' personal data. For that data, you are the controller and Gible Ltd is your processor. We only use it on your instructions, under the data processing agreement we sign with you. Your own privacy notice should tell your users you use Garlic to protect your service.
What we collect as controller
| Data | Where it comes from | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Name, work email, company, product URL | Forms, email, calls | To respond, deliver a Garlic Score and run a pilot | Steps before a contract, then the contract |
| Business contact details | Public sources such as company websites and professional profiles | To contact founders about Garlic | Legitimate interests: telling relevant businesses about a relevant service |
| Payment and invoice details | Stripe | To take payment and keep accounts | Contract; legal obligation for accounting records |
| Call notes | Our calls with you | To understand your needs and improve Garlic | Legitimate interests |
We send business emails only to company addresses, always with a clear way to opt out, as UK electronic-marketing rules (PECR) require. Reply "stop" and we won't contact you again.
What we don't do
- We don't sell personal data.
- We don't use cookies or tracking on our site.
- The Garlic Score preview runs entirely in your browser. The file you drop into it is not uploaded to us or anyone else. If you choose to email us the signals it shows, we receive numbers and your verdicts only: no question text, account IDs or product name.
- In the founding pilot, we don't send customer logs to AI model providers. Garlic Score v0 runs deterministic checks on our own systems, and a named person at Garlic reviews the results.
Who we share it with
| Recipient | Purpose | Location and safeguard |
|---|---|---|
| Stripe | Payments | UK, EU and US; UK–US data bridge or international data transfer agreement |
| Google (Google Workspace) | Email, and encrypted storage of logs and reports | US and other countries; UK–US data bridge |
| Vercel | Hosting our website and passing sign-up requests to our Google Workspace | US and other countries; UK–US data bridge |
| Google Fonts | Loading our website's typeface; Google receives your IP address | US; UK–US data bridge |
We may disclose data if the law requires it.
How long we keep it
- Contact and sales records: up to 2 years after our last contact.
- Invoices and payment records: 6 years, as UK tax law requires.
- Customer logs: as set out in our data processing agreement. By default, raw logs are deleted within 30 days of delivering a report, and we keep only derived signals.
Your rights
You can ask to access, correct, delete or restrict your data, object to our use of it (including for direct marketing, which we will always honour), and ask for a copy in a portable format. Write to Gible Ltd at our registered office. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix it first.
Changes
We'll update this notice as Garlic changes and show the date at the top.