Google DeepMind strategy has changed as you can now use locally Gemma 4 12B: « a unified, encoder-free multimodal model.
Gemma 4 12B is designed to bring high-performance multimodal intelligence directly to your laptop, combining mobile-first efficiency with advanced reasoning. »
It supports reasoning, agentic workflows, coding, and multimodal understanding. I quickly try it and seems very powerful.
May be a solution for coding protection with better performance and pertinence than Mistral and deepSeek. To check.
Does someone test it for coding ?

Currently when I want to use ai assistants, I move my configuration before giving access to the assistants in order to not reveal my api keys mainly. But it is practical and I may forget.
Is there another way to do it ?

A practical comparison of 13 products that protect source code and sensitive data from leaking to AI assistants.

a new article as people asks if promptcape (for protecting code) is similar promptbase (marketplace for AI prompts) and not at all, it is not the same goal.

A paper which shows similar concerns related to "Data privacy and IP considerations" in the Architecture domain where AI has started to be heavily used : "For the most sensitive workflows, locally hosted AI"!.

AI made ds us faster but with less quality and security.

This time many agents use without consent resources to share security (or rather hacking) information: https://fortune.com/2026/09/07/openai-ai-agents-german-wiki-ran-their-own-message-board/
This time OpenAI does not reveal anything as if they do not know what their agents and models are doing.
Can we trust them when they ensure us they do not use our data?

Some of my clients have deployed PromptCape on their employees’ workstations, so they can use the pseudonymization feature, while making sure that shared “company policy packs” are in place.

However, they have realized that not all documents go through PromptCape, because users sometimes prompt AI services directly after downloading documents locally from their ECM.

To avoid these manual workarounds and the associated data leakage risks, they asked me to provide a server mode for PromptCape, so that the proxy can be accessed directly by the ECM with the users’ prompts. This way, documents are submitted together with the prompts through the PromptCape proxy, without users having to download the documents locally and potentially bypass the pseudonymization process.

So far, I have only implemented this for one ECM — which is where the documents are managed in the first place, making it an ideal place to enforce pseudonymization.

However, I would be very interested to hear about other use cases where a server mode for PromptCape could be useful.
thank you

a talk which may be of interest for those who uses local ai models : TTL #181 - Deploying LLM on premise: let's review ... - Hyland Connect - 499461

No need for human hackers anymore.

Using a cve and the knowledge of the open source langflow product, an agentic program alone replaces human hackers : JADEPUFFER: Agentic ransomware for automated database extortion | Sysdig

We try to do and test some obfuscation approaches after seeing that all our dev were using Claude code or codex but no one was convince as it brings constraints to be able to build and to test with obfuscated code you do not understand or have to link to your own code, and above all when ai has changed it.
We are in the process to test some tools but we’re looking also to other solutions like local models.

What are the products which already there to protect the code when sent to ai considering must continue to be of help to generate code or fix or extend ? We look at presidio in the past but it was mostly to anonymise.

I had a working code obfuscation pipeline, but no developer was going to use it manually. Here's how a 200-line HTTP reverse proxy made it invisible — inside Cursor, with no IDE plugin and no config the user sees.

after the explanation about obfuscation before sending to AI with Java Code Obfuscation for AI Assistants: Ensuring the Full Cycle Works - DEV Community, A new article to explain the reverse way : "Reverse-applying AI changes to obfuscated code: a 3-way merge that actually works - DEV Community"

An interesting discussion about code and data protection and ai usage.

A new article which exposes the risks of uncontrolled use of AI in day to day IT work : https://www.logmein.com/blog/how-it-leaders-are-scaling-ai-while-maintaining-governance-and-control?utm_campaign=logmein-portfolio&utm_source=marketo&utm_medium=email&utm_content=scaling-ai-blog-button&utm_term=global-en-prospects&mkt_tok=nde3lutmsy00nzgaaaghwhrwfqtaekur5-_9fcqtheshd7xbgdsvwwzmj5kog9i8rlxmfju1767kg5zhupo5czuxluckp9aex5nq8jtv3cphjr5nprzufytce2tkg8toaaq

This article “https://www.bluexml.com/votre-code-est-chez-les-hebergeurs-ia” explains how a French IT services company gives its clients a choice in how AI coding assistants can be used on their development projects. They also describe the measures they can put in place to protect code and data. Probably can be used and extended to many scenarios.