{"repo":"censgate/redact","free":true,"listed":false,"github":"https://github.com/censgate/redact","clone":"git clone https://github.com/censgate/redact.git","description":"Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.","language":"Rust","stars":17,"topics":["ai-security","anonymization","compliance","dlp","gdpr","llm","pii","pii-anonymization","pii-detection","pii-redaction"],"license":"Apache-2.0","category":"ai-agents","readme_excerpt":"Detect and redact PII and secrets — then prove what left. For teams that gate secrets in CI, inventory PII in Postgres, or send prompts to a model provider and need a third party to verify the evidence pack. One Rust engine: CLI, gateway, scanner, WASM. Apache-2.0. Quick Start · Evidence · Docs · Contributing --- - Secrets in CI — redact analyze --fail-on-detect . Deterministic, no NER, no network. Adjacent to gitleaks, at runtime rather than at rest. Default compiled set is 61 types ( redact --format json list-entities ); the long tail is an opt-in pack, not gitleaks parity. - Postgres PII discovery — redact-scan . Read-only (replica/staging preferred). Locations and counts only; sample values never leave the host. --report-url is an explicit opt-in POST of that findings JSON. An input to a records-of-processing inventory (GDPR Art. 30), not a certification. - Prove what left — gateway + ledger + redact-verify . The gateway is the delivery mechanism. The evidence pack is what a third party can check offline. - Embed the engine — redact-core library, REST API, and pattern-only WASM. p50 latency vs Presidio was 32× on the 2026-04-18 oha payload (benchmark). That is a throughput/latency measurement, not a quality score. Evidence and attestation A log you control is not evidence. The gateway can emit audit records (schema), but those records are written by the same operator who ran the proxy: the in-process queue can drop under load, the sink is yours, and nothing stops a rewrit","default_branch":null,"files":null,"tree":[],"storefront":"/r/censgate","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/censgate/redact/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}