Fast • Offline • No telemetry

GhostRedact

Scrub emails, phones, card numbers, and IPs from logs & JSON — quickly, locally, and reliably.

Works on Windows • macOS (arm64) • Linux
GhostRedact CLI demo redacting PII in terminal

Built‑in detectors

Email, phone, credit card (Luhn), IPv4/IPv6, IBAN.

Extensible rules

Load JSON/YAML custom patterns. Bonus pack includes JWT, UUID, AWS keys, MAC, API keys, and more.

Redaction modes

mask, tag, or hash (with -salt). Optional JSON report of counts.

Formats & performance

Text and JSON (walks nested values), streams or files. Single static binary; runs 100% offline.

Quickstart

# Redact a file (mask mode by default)
ghostredact -in server.log -out clean.log

# JSON-aware redaction (tag mode)
ghostredact -in sample.json -format json -mode tag -out clean.json

# From stdin to stdout
cat dump.txt | ghostredact -mode tag > clean.txt

# Counts report (JSON) written to file
ghostredact -in server.log -report report.json

# Use custom patterns (JSON/YAML)
ghostredact -in logs.txt --custom patterns.json -mode tag

What it does

Planned roadmap

Status: Active