Skip to content
ScrubLogs

Remove secrets from logs before you share them

Paste a log, stack trace or config file. Keys, tokens, passwords, emails and IPs become placeholders like<AWS_KEY_1>, so it’s safe for ChatGPT, Claude, GitHub issues and support tickets.

Runs 100% in your browser. Nothing is uploaded.

How to redact a log

  1. Paste your text into the left pane, or drop a file onto it. Detection runs as you type.
  2. Check the highlights. Click anything you want to keep; select anything that was missed and press Redact selection.
  3. Press Copy cleaned text or Download, and share that instead of the original.

Why redact before pasting into AI tools

Logs routinely carry the keys to your infrastructure and your customers’ details. Once pasted into a chatbot, an issue tracker or a forum, that text is stored by someone else, may be visible to others, and can’t be taken back. Leaked cloud keys are typically found by automated scanners and abused within minutes.

Pasting customer data into third-party AI tools can also break your company’s AI policy and privacy law such as the GDPR or the Philippine Data Privacy Act. Redacting first lets you ask for help without that risk.

What ScrubLogs detects

Over 30 rules in seven categories, based on the open-source gitleaks rule set and tuned for logs. Each value gets a numbered placeholder, and the same value always gets the same one.

Cloud & API keys

  • AWS access key ID<AWS_KEY_1>
  • AWS secret access key<AWS_SECRET_1>
  • GitHub token<GITHUB_TOKEN_1>
  • GitLab token<GITLAB_TOKEN_1>
  • Stripe secret key<STRIPE_KEY_1>
  • Slack token<SLACK_TOKEN_1>
  • Slack webhook URL<SLACK_WEBHOOK_1>
  • Google API key<GOOGLE_KEY_1>
  • OpenAI API key<OPENAI_KEY_1>
  • Anthropic API key<ANTHROPIC_KEY_1>
  • SendGrid API key<SENDGRID_KEY_1>
  • npm access token<NPM_TOKEN_1>
  • Hugging Face token<HF_TOKEN_1>
  • DigitalOcean token<DO_TOKEN_1>

Auth material

  • JSON Web Token<JWT_1>
  • Private key block<PRIVATE_KEY_1>
  • Bearer / Basic authorization header<TOKEN_1>
  • Session cookie<SESSION_1>

Credentials

  • Secret in key/value pair<SECRET_1>
  • Password in URL or connection string<PASSWORD_1>

Personal data

  • Email address<EMAIL_1>
  • Phone number<PHONE_1>
  • Credit card number<CARD_1>
  • Philippine TIN<TIN_1>
  • Philippine SSS number<SSS_1>
  • US Social Security number<SSN_1>

Network & system

  • IPv4 address<IP_1>
  • IPv6 address<IP_1>
  • MAC address<MAC_1>
  • Internal hostname<HOST_1>
  • Username in file path<USER_1>

Identifiersoff by default

  • UUID<UUID_1>
  • Order, customer or account ID<ID_1>

High-entropy stringsoff by default

  • High-entropy string<TOKEN_1>
  • Long hex string<HEX_1>

Frequently asked questions

Is my text uploaded anywhere?

No. The tool runs in your browser on a separate page that is blocked from making network requests, so it couldn’t send your text even if it tried. To check, open your browser’s developer tools, select the Network tab and paste a log: the tool makes no requests.

Why placeholders like <EMAIL_1> instead of just deleting things?

So the log still makes sense. If the same email appears ten times it becomes <EMAIL_1> every time, and a different one becomes <EMAIL_2>. An AI assistant or a colleague can follow what happened without seeing who it happened to.

Will it catch everything?

No tool can. ScrubLogs catches well-known key formats, passwords in config and connection strings, and common personal data. Names and street addresses have no fixed pattern: select them and press Redact selection. Always read the cleaned text before you share it.

Is it safe to paste API keys into ChatGPT or Claude?

Treat any key you paste into a third-party service as exposed. It may be stored in chat history, and your company’s AI policy probably forbids it. Redact first; if a key was already pasted, rotate it.

Something was redacted that I need to keep. What do I do?

Click it, in either pane. Every occurrence of that value is put back. Click again to redact it again. You can also switch off whole categories, such as network details.

How large a file can I clean?

Files up to 10 MB, pasted or dropped onto the tool. Everything is processed on your device.

Clean a specific kind of log

If a secret already leaked

What leaked keys look like