Credits

Built by Golonex

We do cybersecurity, compliance and AI work for teams that answer to a regulator. This site exists because we kept having the same conversation — someone was about to paste a contract, a customer list or a live API key into a chatbot, and the honest answer took ten minutes every time. A link was faster. Everything here is the short version of advice we'd otherwise be giving one person at a time, and the checker is that advice with the arguing taken out.

What Golonex does

• →Cybersecurity — securing the systems and the data inside them, before someone else finds the gap
• →Software development — building the thing properly, including the parts nobody sees
• →AI automation — putting AI into the work people actually do, without putting the company's data somewhere it shouldn't be
• →Tech staffing — people who can do the work, for as long as the work needs doing
• →Compliance management — policies, controls and evidence that survive an audit — the part most projects leave until someone asks
• →Fractional leadership — vCTO, vCAIO and vDPO — the senior seat filled by the day or the month, for teams that need the judgement without the headcount

If any of that is the problem you have, golonex.com is where it's explained properly. This page isn't a pitch deck.

Recent updates

Newest first. This is what actually shipped, not a roadmap.

• •The paste test opened — Ten scenarios at /paste-test, one question each time: would you paste this? Three of the ten are perfectly safe, which is the part that catches people — the useful rule was never "never paste". Scored in the page, recorded nowhere. (4 August 2026)
• •The paste checker went live — A checker at /check-a-paste that reads your text in the browser and tells you what is in it before an AI tool sees it. Nothing you paste is sent anywhere — verify it with the network tab open. (4 August 2026)
• •The pattern corpus was published — 36 rules across universal secrets and AU, US, UK, EU and NZ identifiers, with checksums and real example vectors. Downloadable at /patterndb.json, MIT licensed, and the same file the checker itself runs on. (4 August 2026)
• •Abstract mode joined redaction — Instead of replacing a finding with [REDACTED], the checker can swap in a deterministic fake of the same shape — drawn from reserved, never-issued ranges so it can never collide with a real person’s number. (4 August 2026)
• •The rules API started serving a signed corpus — A small Worker serves the pattern list with an Ed25519 signature over the exact file bytes, so any client can prove the rules it received are the rules we published. (4 August 2026)

Colophon

Built with Astro, output as plain static HTML. Hosted on Cloudflare. There is no application server behind this site and no database — the pages you're reading are files.

The fonts are self-hosted. Nothing is fetched from Google's font service, or from any other third party, when a page loads. That's a deliberate choice and the reasoning is on the usage and privacy page.

The checker page loads no analytics at all. Not gated behind consent — absent. Detection runs entirely in your browser against a pattern list built into the page, so a scan makes no network request. The build fails if network primitives appear in that page's code, which is a cheaper guarantee to keep than a promise.

The pattern list is public: patterndb.json, under the MIT licence. It comes with no warranty — a pattern list finds what it has patterns for, and it will miss things.

The share images are hand-built SVGs with no external references, converted to PNG in your own browser. The illustrations, the wording and the mistakes are all ours.

Contact

Questions, corrections, a pattern we've missed, or a complaint about anything on this site — hello@golonex.com. A person reads it.

The company: golonex.com.

Golonex is a trading name of Radha Technology Group LLC, which is the entity behind this site. Last updated 4 August 2026.

Where to next

• Check a paste before it goes into AI →
• Usage and privacy →
• Free share images →