What does this tool do?

It redacts sensitive text with scanGuardrails: email, phone, checksum-validated TCKN, Luhn-validated cards, Turkey IBAN, IPv4, and SSN built-ins with mask/hash/remove strategies, plus custom regex rules and JSON export/import.

Why was one TCKN or card number skipped?

Only checksum-passing values flag — 10000000146 redacts but 10000000147 does not, and 4111 1111 1111 1112 stays visible because it fails Luhn.

Is my text uploaded or stored?

No. Pattern matching, checksum checks, and redaction run entirely in your browser.

How does masking look, and how do custom rules work?

Masking replaces each character with * at the same length. Add any { id, name, pattern, strategy } regex (e.g. sk-[A-Za-z0-9]{8}) and it scans alongside the built-ins.

LLM Guardrails & PII Redactor

Build and test deterministic PII redaction rules entirely in your browser

Rule editor

Email
Phone (TR / international)
T.C. identity number
Credit card (Luhn)
IBAN (Turkey)
IPv4 address
US SSN

Test text

Rule set JSON

{
  "version": 1,
  "rules": [
    {
      "id": "email",
      "name": "Email",
      "pattern": "[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}",
      "flags": "gi",
      "strategy": "mask",
      "builtIn": "email"
    },
    {
      "id": "phone",
      "name": "Phone (TR / international)",
      "pattern": "(?<!\\d)(?:\\+?90|0)[ -]?(?:5\\d{2})[ -]?\\d{3}[ -]?\\d{2}[ -]?\\d{2}(?!\\d)|(?<!\\d)\\+\\d{1,3}[ -]?(?:\\(\\d{2,4}\\)|\\d{2,4})[ -]?\\d{3,4}[ -]?\\d{3,4}(?!\\d)",
      "flags": "gi",
      "strategy": "mask",
      "builtIn": "phone"
    },
    {
      "id": "tckn",
      "name": "T.C. identity number",
      "pattern": "(?<!\\d)[1-9]\\d{10}(?!\\d)",
      "flags": "g",
      "strategy": "mask",
      "builtIn": "tckn"
    },
    {
      "id": "credit-card",
      "name": "Credit card (Luhn)",
      "pattern": "(?<!\\d)(?:\\d[ -]?){12,18}\\d(?![ -]?\\d)",
      "flags": "g",
      "strategy": "mask",
      "builtIn": "credit-card"
    },
    {
      "id": "iban-tr",
      "name": "IBAN (Turkey)",
      "pattern": "(?<![A-Z0-9])TR\\d{2}(?:[ -]?\\d{4}){5}[ -]?\\d{2}(?![A-Z0-9])",
      "flags": "gi",
      "strategy": "mask",
      "builtIn": "iban-tr"
    },
    {
      "id": "ipv4",
      "name": "IPv4 address",
      "pattern": "(?<![\\d.])(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1?\\d?\\d)){3}(?![\\d.])",
      "flags": "g",
      "strategy": "mask",
      "builtIn": "ipv4"
    },
    {
      "id": "ssn",
      "name": "US SSN",
      "pattern": "(?<!\\d)\\d{3}-\\d{2}-\\d{4}(?!\\d)",
      "flags": "g",
      "strategy": "mask",
      "builtIn": "ssn"
    }
  ]
}

Redacted output

Contact ***************** at *****************. Card: *******************

Findings (3)

Rule	Position	Match
Email	8–25	alice@example.com
Phone (TR / international)	29–46	+90 532 123 45 67
Credit card (Luhn)	54–73	4111 1111 1111 1111

Built-in email, phone, T.C. identity, Luhn credit card, Turkish IBAN, IPv4, and SSN detectors plus custom regular expressions. All processing is client-side.

LLM Guardrails & PII Redactor

Rule editor

Test text

Rule set JSON

Redacted output

Findings (3)

System Prompts, Agent Memory & Guardrails: LLM Ops

Agent Tool Flowchart Builder

AI Agent Memory & Buffer Simulator

AI Code Explainer

AI Commit Message Generator

AI Documentation Generator

AI Regex Generator

Rule editor

Test text

Rule set JSON

Redacted output

Findings (3)

Related guides

System Prompts, Agent Memory & Guardrails: LLM Ops

Related tools

Agent Tool Flowchart Builder

AI Agent Memory & Buffer Simulator

AI Code Explainer

AI Commit Message Generator

AI Documentation Generator

AI Regex Generator