Incident response log checklist
Confirm context, ownership, and redaction quality before escalation.
OpenMask tokens and PII while keeping JSON/log structure readable. Runs locally in your browser.
Log / JSON Sanitizer: Mask tokens and PII in logs or JSON while keeping structure readable.
This tool scans logs and JSON payloads for common secrets and identifiers and replaces them with explicit placeholders.
It keeps formatting intact so the sanitized output is still useful for incident timelines and debugging notes.
| Category | Examples | Replacement |
|---|---|---|
| Authorization header | Authorization: Bearer … | [REDACTED:AUTH] |
| API key headers | x-api-keyapi-key | [REDACTED:API_KEY] |
| Cookie header | Cookie: sessionid=… | [REDACTED:COOKIE] |
| Set-Cookie header | Set-Cookie: session=… | [REDACTED:SET_COOKIE] |
| Token-like query params | tokenaccess_tokenid_tokenapi_keysignaturesessionauth | [REDACTED:QP] |
| JWTs in text | eyJ... | [REDACTED:JWT] |
| Email addresses | user@example.com | [REDACTED:EMAIL] |
| IP addresses | 203.0.113.10 | [REDACTED:IP] |
| Card numbers (Luhn) | 4111 1111 1111 1111 | [REDACTED:CARD] |
| Bearer tokens inline | Bearer abc.def.ghi | Bearer [REDACTED:BEARER] |
Not legal advice and not a security guarantee. Always review sanitized output before sharing.