About Sensitive Data Scanner
Every finding is a shape — a card number that passes the Luhn check, an IBAN that passes mod-97, a key with the prefix its provider uses — and each one is marked with how confident that shape is. What the scanner cannot do is know that a word is a person's name or a street; it says so on the page rather than implying a clean result means anonymous data.
Before a log goes into a bug report, a CSV export goes to a contractor, or a config file gets pasted into a chat, somebody should read it for what it gives away. Nobody does, because a log is ten thousand lines. This scanner reads it for you, looking for sixteen shapes that personal and secret data take: email addresses, phone numbers, IPv4 and IPv6 addresses, GPS coordinates, card numbers, IBANs, US Social Security numbers, JSON Web Tokens, AWS, GitHub, Slack and Google keys, private-key blocks, credentials embedded in URLs, and passwords or tokens sitting on the right of an equals sign.
Shapes that can be checked are checked, which is what keeps the results useful. A run of sixteen digits is reported as a card only if it passes the Luhn checksum, so order numbers and timestamps do not light up; an IBAN must pass its mod-97 test; an IPv4 address must have four octets in range, so a three-part version number is left alone. Kinds that cannot be verified — phone numbers, coordinates, a four-part version number that is indistinguishable from an address — are marked medium confidence and listed second, because they will sometimes match other numbers.
The result is shown two ways. The highlighted view marks each finding in place, with a list beside it showing the kind and a partial mask — enough to recognise which customer or which key without reproducing it. The redacted view is a copy of the text with every finding replaced, either by a label such as [EMAIL] and [CARD] that keeps the text readable, or by a mask that leaves the last four digits and the domain so a colleague can still tell entries apart. Copy it, or download it as a file.
It is honest about its limits because the limit matters. Detection is by form, not meaning: a person's name, a street address, a date of birth written in words, or a diagnosis have no shape a pattern can recognise, and no finding here says anything about them. A clean result means none of the sixteen shapes were present. It does not mean the text is anonymous, and the page says exactly that above the findings.