JSON Anonymizer

Context-aware secret detection for JSON-structured data

LogScrub's JSON anonymizer goes beyond simple pattern matching. It understands JSON structure and detects sensitive values based on their key names—finding passwords, tokens, and secrets that pattern matching alone would miss.

How Context-Aware Detection Works

Traditional PII detection looks for patterns like sk_live_... or email formats. Context-aware detection finds sensitive values by their key names:

{
  "user": "admin",
  "password": "myS3cretP@ss",
  "api_token": "abc123xyz",
  "session_id": "sess_789"
}

✓ password → "myS3cretP@ss"
  (High confidence: key contains "password")

✓ api_token → "abc123xyz"
  (High confidence: key contains "token")

✓ session_id → "sess_789"
  (Medium confidence: key contains "session")

Suspicious Key Names

LogScrub detects values associated with these key patterns:

Before & After Examples

API Configuration

{
  "database": {
    "host": "db.internal.corp",
    "user": "app_user",
    "password": "Pr0dP@ssw0rd!"
  },
  "stripe": {
    "api_key": "sk_live_4eC39HqLyjW",
    "webhook_secret": "whsec_abc123"
  }
}

{
  "database": {
    "host": "[HOST-1]",
    "user": "[USER-1]",
    "password": "[REDACTED]"
  },
  "stripe": {
    "api_key": "[API-KEY-1]",
    "webhook_secret": "[REDACTED]"
  }
}

Structured Log Entry (NDJSON)

{"ts":"2024-01-15T10:30:00Z","level":"info","user_email":"john@corp.com","action":"login","ip":"192.168.1.50"}
{"ts":"2024-01-15T10:30:05Z","level":"debug","auth_token":"eyJhbGc...","refresh_token":"rt_abc123"}

{"ts":"2024-01-15T10:30:00Z","level":"info","user_email":"[EMAIL-1]","action":"login","ip":"[IP-1]"}
{"ts":"2024-01-15T10:30:05Z","level":"debug","auth_token":"[JWT-1]","refresh_token":"[REDACTED]"}

Nested Objects

{
  "config": {
    "services": {
      "payment": {
        "credentials": {
          "client_secret": "cs_abc123"
        }
      }
    }
  }
}

{
  "config": {
    "services": {
      "payment": {
        "credentials": {
          "client_secret": "[REDACTED]"
        }
      }
    }
  }
}

Supported Formats

{"user": "john", "password": "secret123"}

{"event": "login", "user": "alice"}
{"event": "logout", "user": "alice"}

2024-01-15 INFO Request received: {"user_id": 123, "api_key": "abc"}

Confidence Levels

Context-aware findings are ranked by confidence:

• High — Key name directly matches sensitive patterns (e.g., password, api_key)
• Medium — Key name partially matches or contains sensitive terms (e.g., user_session_id)
• Low — Value looks suspicious but key name is generic (e.g., long random strings)

Syntax Validation

LogScrub validates your JSON syntax and shows errors with clickable line numbers:

✗ JSON Syntax Error at line 5, column 12:
  Expected ':' but found '}'

  Click to jump to error location

Valid JSON shows a green checkmark indicator.