Text Data Discovery & Sensitive Pattern Classification Scanner

The Text Data Discovery & Sensitive Pattern Classification Scanner enables developers, security auditors, and compliance analysts to inspect unstructured text data for confidential information. Users can paste server logs, database query outputs, API payloads, or configuration files directly into the tool.

The client-side scanner evaluates text against multi-tier detection patterns covering Personally Identifiable Information (PII), Payment Card Industry data (PCI), Protected Health Information (PHI), and cryptographic credentials, classifying findings into sensitivity tiers with masked previews.

A frequent cause of data leaks is "log leakage"—applications inadvertently printing user passwords, credit card numbers, or authorization tokens into application logs. When these logs are forwarded to centralized platforms like Datadog, Splunk, or Elasticsearch, the sensitive data becomes accessible to dozens of engineers and support personnel, violating PCI DSS Requirement 3.4 and GDPR Article 32.

Data discovery scanners provide the foundation for log sanitization filters. By testing log outputs against regex classifiers, engineering teams identify logging statements that require masking (e.g., transforming `4111222233334444` to `4111********4444`) before data leaves the originating microservice.