Cloud scanners inspect text. Thicket intercepts execution. Those are not the same problem.
| Capability | Thicket | Cloud prompt scanners |
|---|---|---|
| Runtime blocking | Yes — at the execution boundary | No |
| SSRF protection | Yes | No |
| Deserialization hardening | Yes | No |
| Works offline / air-gapped | Yes | No |
| No AI making blocking decisions | Yes | No |
| Data leaves your process | Never | Always |
| OS kernel backstop | Yes (Linux ≥ 5.10) | No |
For organisations with data-sovereignty requirements, a cloud scanner that receives your prompts is not a viable option regardless of detection quality.