About nocternal
nocternal is a small set of single-purpose tools for the files developers share when something breaks at 2 a.m.: logs, configs, pastes. Each tool strips or masks the secrets those files tend to carry — keys, tokens, passwords, emails, IPs — so you can hand them to a teammate, a ticket, or an AI chat without handing over your credentials too.
The trust mechanic
Everything runs in your browser. There is no server-side processing, no
account, and no upload — and you don't have to take our word for it. Every
tool page ships a Content-Security-Policy with
connect-src 'none', which means your browser itself
refuses to let the page transmit anything, anywhere. Open DevTools, watch
the network tab while you use a tool: after the page loads, nothing leaves.
noc, the metrics board, is the exception and is built on a narrower promise: a board has to reach the endpoint you point it at, so its pages ship a wider policy than the tool pages do. What that policy shows is that noc contacts no third party; that it contacts only your endpoint is carried by the copy on those pages and by the same Network tab, not by the header.
Honest limits
Detection is pattern-based and best-effort. The tools catch common secret shapes and flag high-entropy strings for review, but no scrubber can guarantee a clean file. Review the output before you share it — every tool says this, because it's true.