PII-Shield
Log Sanitization Sidecar with JSON Integrity (Go, Entropy)
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC.Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data.Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy analysis to catch high-randomness strings. 3. Fail-Open: Designed as a transparent pipe wrapper to preserve app uptime.The project is open-source (Apache 2.0).Repo: https://github.com/aragossa/pii-shield Docs: https://pii-shield.gitbook.io/docs/I'd love your feedback on the entropy/threshold logic!
HN · launched Feb 3, 2026 · 20 upvotes (top 31%) · 0 views
Niche: enterprise data privacy and anonymization software · 54 launches, 3 in the last 7 days ▼ -40% · Explore this niche →
Category and tags
- Security
- Compliance & governance
- Developer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 54 launches in enterprise data privacy and anonymization software →
Could you build this?
Yes A Go sidecar reading from stdout/stdin, calculating Shannon entropy over sliding tokens, and applying HMAC hashing is a well-scoped systems utility easily written with AI assistance.
Discussion
11 comments analyzed.
Concerns raised: Doesn't redact UUIDs by default without threshold adjustment, Focuses on high-entropy secrets, not names or SSNs, May not catch simple test values with default entropy threshold
Feature requests: Redact by Value Regex to catch UUIDs anywhere, Customize UUID redaction without global threshold tuning, Better product naming to clarify it targets secrets not PII
Competitors
Other products that read as similar to this one : 117 launches clear the similarity bar, closest 8 shown.
Attention rank: #47 of 118 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 94 days after the earliest competitor.
- API Key Leak Intercept · ph · 2026-11-06 · 1 upvotes · similarity 0.45
- Data Sanitizer · ph · 2026-09-17 · 2 upvotes · similarity 0.45
- Local Privacy Firewall-blocks PII and secrets before ChatGPT sees them · hn · 2025-12-09 · 111 upvotes · similarity 0.42
- maskgate · github · 2026-09-09 · 268 upvotes · similarity 0.41
- A local-first, reversible PII scrubber for AI workflows · hn · 2025-12-24 · 38 upvotes · similarity 0.39
- LogClaw · hn · 2026-03-12 · 19 upvotes · similarity 0.39
- Secure Core FFI · ph · 2026-09-14 · 1 upvotes · similarity 0.39
- DriftMap · ph · 2026-11-09 · 1 upvotes · similarity 0.39
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.