pii-detector

Run the built-in PII detector to scan your repository for sensitive data across code, logs, databases, and configuration files. The detector identifies SSNs, credit cards, emails, phone numbers, IP addresses, and API keys, producing a structured report with file paths, line numbers, and masked values to help you locate and remediate exposure.

PII detection recognizes Social Security numbers, credit card numbers, email addresses, phone numbers, IP addresses, dates of birth, and API tokens. It applies regex-based pattern matching across multiple file types and languages to identify these data types wherever they appear in your codebase or configuration.

Yes. PII scanning helps you identify and remediate personally identifiable information across your systems, supporting privacy compliance efforts under GDPR and CCPA. By locating sensitive data before release, you reduce regulatory risk and demonstrate due diligence in data protection.

The detector implements file-size aware scanning and false-positive filtering alongside regex patterns to reduce noise in large repositories. This produces higher-confidence results by distinguishing genuine sensitive data from coincidental pattern matches in comments, test data, or documentation.

A structured PII report shows file paths, line numbers, detected data type, and masked values for each sensitive data instance found. This enables your team to quickly review, prioritize, and apply redaction or masking steps to remediate exposure before deployment.