All tools
Each tool does one job and does it entirely in your browser — nothing you drop in leaves your device, and every change is shown for review before you share. How that promise is enforced →
- .env & config scrubberMask the values and keep the keys in a .env, YAML, TOML, INI, or JSON config before you share it.Open the tool →
- Access-log IP anonymizerTruncate or tokenize IPs (and mask other secrets) in an nginx/Apache log before you share it.Open the tool →
- CSV sample anonymizerMask the PII columns in a CSV — emails, phones, names, cards, SSNs — with consistent tokens, so a data sample is safe to share with a vendor, a ticket, or an AI chat.Open the tool →
- curl command sanitizerStrip auth headers, cookies, and body credentials out of a copied-as-cURL command — and keep it runnable.Open the tool →
- HAR sanitizer + viewerStrip auth headers, cookies, tokens, and body secrets from a HAR file before you attach it to a ticket — then review it entry by entry.Open the tool →
- JSON redactorRedact secrets out of deeply nested JSON — API responses, exports, payloads — by key name and by pattern, with pretty-printed output.Open the tool →
- Log file redactorMask emails, IPs, API keys, JWTs, and passwords in a log before you share it.Open the tool →
- Paste scrubber for AI chatsScrub keys, tokens, passwords, and emails out of a paste before it goes into an AI chat.Open the tool →
- Secret scanner (detect-only)Check a file for API keys, tokens, and passwords before you commit or share it. A findings report — nothing is changed, downloaded, or uploaded.Open the tool →
- Stack trace cleanerStrip usernames, local paths, and internal hostnames out of a stack trace before you share it.Open the tool →