Cloud & AI for regulated, BaFin-supervised teams — from the team behind Redactor. · Book a consultation →
On-device — your data never leaves your Mac

Never paste a secret again.

Redactor catches API keys, tokens, and PII at the three moments you handle them — the clipboard, the AI prompt, the commit — on-device, before they ever leak.

Signed, notarized & checksummed — verify your download →

265 detectors your data never leaves MCP for Claude & Cursor made in Hamburg
For developers

Secret-aware,
by habit.

Redactor sits in the three places you handle secrets without thinking — the clipboard, the AI prompt, the commit — and turns each one into a small, blameless nudge. Catch the key, see what it was and why it matters, keep moving. The habit builds itself.

A blocked build teaches you the tool is annoying. A nudge at the moment you'd slip teaches you the thing — so next time you catch it yourself.

⌥⌘R on copy · clipboard watch

Every catch is a lesson

The instant you copy a credential, Redactor names it — what it is, what it grants, why it matters — and offers a one-click redact. No build to fail, no commit blocked, no shame. The lesson lands exactly where you'd have leaked, and it sticks.

Secret on your clipboard Redactor
GitHub Personal Access Token
ghp_1c3f••••••••••••uXq

Grants repo access until it's revoked. Don't paste it into a chat, a ticket, or a commit.

caught by rule: github_pat
⌘V in the prompt · any AI

Use any AI — without leaking, or dumbing it down

Paste code, an error, a connection string into Claude, ChatGPT, or Cursor and it's already clean. Realistic fakes keep the values believable, so the model still reasons over a real-looking string and gives you a real answer — then Restore flips the originals back into the reply. In Claude Code and Cursor, the built-in MCP server does it in the loop. You just talk to the agent. And in the browser, the Redactor extension scrubs prompts to ChatGPT, Claude & Gemini before they leave the page — same engine, Chrome Web Store listing on the way.

1You copy
psql postgres://admin:hunter2@db.prod.acme.io:5432
2Claude only ever sees
psql postgres://app_svc:N7q4-z2f@db.internal.example:5432
Believable stand-ins — the model reasons normally, the real values never left your Mac.
3Restore the reply
db.internal.exampledb.prod.acme.io
$ claude mcp add --scope user redactor \ -- /Applications/Redactor.app/Contents/MacOS/redactor mcp ✓ redactor connected — scan · redact · restore
git commit on commit · pre-commit hook

A hint, not a wall

Install the hook and Redactor scans your staged changes on every commit, flagging anything that looks like a secret — value masked, so it never lands in your terminal or CI logs. By default it just warns and lets you through: a nudge, not a blocker you'll learn to --no-verify around. Want the wall? Add --strict and the same check fails the commit instead.

$ git commit -m "wip" ⚠ redactor: 1 possible secret in this commit config/app.env:3 AWS_ACCESS_KEY_ID AKIA••••••••PLE Review before sharing — scrub with `redactor redact`. (add --strict to fail the commit instead) [main 1a2b3c4] wip

Non-blocking by default — the commit went through. You just got a nudge in time to fix it.

265
checksum-validated detectors
0
bytes of your data leave
<1s
to scrub a 200 KB paste
reversible — restore anytime

Clipboard watch, screenshot/OCR redaction, an optional local-LLM pass, and the full detector list live on the features page →

Built for regulated teams

Redactor supports specific control objectives in the frameworks regulated EU teams answer to — it's a tool, not a certification. See the mapping →

GDPR / DSGVO
Supports minimisation & pseudonymisation
DORA
Supports ICT data-leakage controls
BaFin BAIT / VAIT
Supports IT confidentiality controls
BSI C5
Supports secret-handling controls
ISO 27001 / 27701
Supports data-leakage prevention
EU AI Act
Supports data minimisation into AI
Behind Redactor
Made in Hamburg

Redactor is built by ZERODOTFIVE Hamburg — the team that helps banks, insurers, and other regulated businesses adopt Cloud & AI. Work with us →

Paste clean.

Stop trusting yourself to catch every key before ⌘V. Let Redactor do it — on-device.