Clipboard paste DLP test
Paste text
Paste text from the clipboard (Ctrl+V) or pick a sample on the right — it is copied and dropped into the field.
Paste file
Paste a file from the clipboard (Ctrl+V) or drag it here. You can also use samples from the panel on the right.
Paste a file (Ctrl+V) or drag it here
An employee copies a row from CRM or Excel — name, SSN, card number — and pastes it into a personal messenger, webmail, or a form on another site. Nothing has left over HTTP/HTTPS yet, but the data already leaked. An endpoint agent should catch paste: with a clipboard policy on, the field should stay empty or a DLP notification should appear.
Above are two targets — text and file. Paste a sample from the right panel or something you copied yourself. Contents do not leave for the DLP Bench server: the check runs only in the browser on your machine.
Clipboard FAQ
Does clipboard content leave for your server?
No. Everything runs in the browser on your computer. We do not read or store clipboard contents.
Why test paste instead of copy?
Clipboard exfil is the moment sensitive data lands in another app or form. Policies should watch paste and inspect clipboard content and the destination. Copying data is normal work and usually should not be blocked.
What counts as a successful block?
The agent denied paste: the field stayed empty, the file never appeared in the list, or the system showed its own DLP alert. If the text is visible or the file is listed on this page — paste succeeded; the policy did not close the channel.
How does pasting text differ from pasting a file?
The text field exercises rules on clipboard content — personal data, cards, passwords, tokens. The file zone covers objects in the clipboard — file names, extensions, sizes, content.
Handy on a pilot, after an agent upgrade, or after policy changes. Compare paste from Excel, an ERP, or an HRIS into the field on this page with behavior in your work browser — that shows whether the clipboard is closed end-to-end or only in certain apps. Also paste randomly generated (clearly benign) data and watch what happens.
Keep testing exfil channels
Send the same data set through a web form, or try other samples.