wrdn-pii

Detect real PII and customer data in code by analyzing diffs, tests, and fixtures to separate authentic customer information from synthetic example data, returning structured findings with file, line, sink, and remediation guidance.

Identify customer identifiers in logs and API responses by tracing data flow to appropriate sinks like URLs and exports, validating context using surrounding lines and file paths before reporting real personal data exposure.

PII detection distinguishes fake from authentic data by applying a trace-first approach that evaluates surrounding lines, file paths, and sink exposure to prevent false alarms while accurately flagging real customer-confidential identifiers.

Scan configuration files and telemetry payloads for personal identifiers with reduced false positives by validating context against file paths, surrounding code, and sink exposure before flagging authentic customer-specific data.

Remediation for real personal data in code artifacts includes data redaction, hashing, or replacing with synthetic placeholders, along with targeted scopes for auditing to prevent further privacy breaches.

PII redaction in code changes requires no external dependencies, applying directly across diffs, docs, configs, logs, telemetry, and API responses to trace data flow and output structured severity findings.