Sensitive Data Scrubber - Mask Confidential Data for AI & Restore

Step-by-Step Instructions

Paste Unsanitized Data or Logs

Paste application server logs, SQL query dumps, error stack traces, or customer datasets.

Configure Scrubbing Profiles

Select detection categories: Passwords, API Keys / Tokens (AWS, GitHub, Stripe, OpenAI), Credit Cards, SSNs, IP Addresses, and Emails.

Choose Replacement Mask

Select masking format: Generic placeholders (`[SECRET_REDACTED]`), hashed identifiers, or partial character masks (`sk-live-***`).

Copy Scrubbed Data

Copy the sanitized logs ready for sharing with third-party vendors, bug tracking systems (Jira, GitHub Issues), or public logs.

Key Features & Capabilities

High-entropy secret key detection identifying AWS Access Keys (`AKIA...`), GitHub Tokens (`ghp_...`), Stripe Keys (`sk_live_...`), and OpenAI Keys (`sk-...`)
Password and authentication credential pattern scrubber for database connection strings (`postgres://user:pass@host`)
Payment Card Industry (PCI) and HIPAA compliance data sanitization engine
Client-side processing guaranteeing zero external leakage of sensitive corporate secrets

Frequently Asked Questions

Why is data scrubbing critical before sharing logs on GitHub or Jira?

Application logs and error stack traces frequently contain accidental secrets (Bearer tokens, database credentials in connection strings, authorization headers, customer PII). Automated bot scrapers continuously monitor public GitHub repositories and Jira boards for leaked API keys to compromise cloud infrastructure within minutes.

How does the scrubber identify API keys from services like AWS, Stripe, and GitHub?

The scrubber uses specialized regex signatures and entropy analysis: **AWS Keys** match `AKIA[0-9A-Z]{16}`; **GitHub Tokens** match `ghp_[a-zA-Z0-9]{36}`; **Stripe Keys** match `sk_live_[0-9a-zA-Z]{24}`; **OpenAI Keys** match `sk-[a-zA-Z0-9]{48}`.

How are database connection strings sanitized?

Connection URIs like `mongodb+srv://admin:[email protected]/prod` are parsed, replacing the password segment with `mongodb+srv://admin:[REDACTED]@cluster0.mongodb.net/prod` while keeping the host structure intact for debugging.

Is data scrubbing executed client-side?

Yes. All regex pattern matching and token scrubbing run entirely in local browser memory. Zero bytes of sensitive data or credentials are ever sent to an external server.