| Category | Name | Severity | Preview |
|---|---|---|---|
| Cloud & Auth | AWS Access Key ID | Critical | [AWS_ID] |
| Cloud & Auth | AWS Access Key ID (Assignment) | Critical | [AWS-ACCESS-KEY] |
| Cloud & Auth | AWS Secret Access Key | Critical | [AWS-SECRET-KEY] |
| Cloud & Auth | AWS Session / Security Token | Critical | [AWS-SESSION-TOKEN] |
| Cloud & Auth | CLI password flag (-p / --password) | High | [CLI-CREDENTIAL] |
| Cloud & Auth | JWT | Critical | [JWT] |
| Cloud & Auth | Kubernetes injected Key … value= | High | [K8S-CREDENTIAL] |
| Cloud & Auth | Private Key | Critical | [KEY] |
| Cloud & Auth | Secrets (Generic, double-quoted) | Critical | ["CREDENTIAL"] |
| Cloud & Auth | Secrets (Generic, single-quoted) | Critical | ['CREDENTIAL'] |
| Cloud & Auth | Secrets (Generic, unquoted) | Critical | [CREDENTIAL] |
| Cloud & Auth | Stripe / Webhook Secrets | Critical | [STRIPE-SECRET] |
| Cloud & Auth | Universal Secret Catch | High | [CATCH-ALL] |
| Cloud & Auth | URI Credentials | High | [URI-CREDENTIAL] |
| Network | IPv4 Address | High | [IPv4] |
| Network | IPv6 Address | High | [IPv6] |
| Network | MAC Address | Medium | [MAC] |
| Sensitive Data | Credit Card | High | [CARD] |
| Sensitive Data | CVV / CVC | High | [CVV] |
| Sensitive Data | Email Address | High | [EMAIL] |
| System | File Path | Medium | [PATH] |
| System | UUID / Session ID (RFC 4122) | High | [UUID] |
Out-of-the-Box Intelligence
22 Forensic Presets
Twenty-two pre-configured rules cover the most common sensitive patterns: AWS keys and session tokens, Stripe secrets, JWTs, generic secret assignments (quoted/unquoted), private keys, credentials in URLs, Kubernetes-injected secrets, IPv4/IPv6, MAC addresses, file paths, UUIDs, plus sensitive data like emails, credit cards, and CVV/CVC. Rules are categorized (Cloud & Auth, Network, Sensitive Data, System) and tagged by severity—Critical, High, and Medium—so you can tune what gets redacted without touching regex.