Overview
Enhanced sensitive data masking in logging and output systems, preventing accidental exposure of credentials, API keys, and other sensitive information.
Detection Strategies
Pattern-Based Detection
- API keys (AWS, GCP, Azure patterns)
- OAuth and JWT tokens
- Passwords and secrets
- Credit card numbers
Context-Based Detection
- Parameters marked as “sensitive”
- Fields with sensitive names (password, token, secret)
- HTTP Authorization headers
Key Features
- Automatic Detection: Identify sensitive data patterns
- Multiple Outputs: Mask across logs, API responses, exports
- Configurable Rules: Custom patterns for organization-specific data
- Partial Masking: Show first/last characters for debugging