Free tool · runs in your browser
Evidence Sanitizer
Powered by Logging Cheat Sheet (OWASP)
Original evidence
Text only, up to 1 MiB. Nothing leaves this tab.
Sanitised copy
Replacements
| Marker | Type | Occurrences |
|---|
Why redact security evidence?
Redaction replaces data a recipient does not need in a copy, such as a session token, personal address or internal IP. It reduces exposure during sharing, but remains a contextual operation that requires human review.
Reduce data before sharing it
The tool replaces identical values with stable markers such as [SECRET_1]. It handles common authentication headers, cookies, private keys, JWTs, AWS identifiers, sensitive fields, emails and IPv4 addresses. Original values appear in neither the summary nor its metadata.
Data to check after redaction
A name, business identifier, database fragment or unusually formatted secret may remain visible. Review the output, minimise what you collect and follow your organisation’s retention rules.
?Frequently asked questions
Is evidence sent to rootzero?
No. Text is transformed in your browser, without network requests or persistent storage.
Can the output be published as-is?
Not without review. The tool masks common formats, but a secret can have any shape or appear in an unexpected context.
Do repeated values keep the same marker?
Yes, within one run. This lets you follow a repeated value without revealing it.
+More tools
- ±HTTPHTTP Evidence Diff
Compare two sanitised HTTP messages without replaying them.
- HTTPHTTP Security Inspector
Review a raw request or response, its headers, cookies and ambiguities.
- IOCIOC Extractor
Extract and defang URLs, domains, IPs, hashes and CVEs.
Technical assessment
Request an application or infrastructure assessment
For an assessment by our team, specify the systems involved, available access and requested tests in your enquiry.