What's New

Enterprise log coverage — audited & expanded

September 2026

NEW Credentials — quoted, XML (<Password>), connection-string and CLI (curl -u, -p, sshpass) passwords; SendGrid, Google, Vault, Hugging Face, Databricks, Shopify, Docker and other vendor tokens; NTLM / Kerberos / bcrypt hashes; webhook secrets (keeping the service URL readable).
NEW Structured fields — CEF/LEEF (suser, dhost, usrName), Windows EVTX/Sysmon XML (<Data Name="TargetUserName">), Linux auditd / sshd / sudo phrasing, syslog header hosts and web-log remote users are read and redacted.
NEW Cloud identifiers — AWS account ids, S3/GCS buckets, ARNs, vpce-/tgw- ids, GCP projects & key ids, Azure storage accounts & resource names, Kubernetes secret names, Okta ids.
NEW Local PII — Israeli ID (checksum-validated), Israeli / US / UK phone formats, Cisco dotted MACs, and geolocation (city + coordinates).
FIX Public cloud endpoints (s3.amazonaws.com, core.windows.net), Cisco/PAN message ids (%ASA-6-302013), PowerShell -EncodedCommand payloads and SSA-invalid SSN lookalikes are kept readable.

A calmer, more focused workspace

September 2026

NEW Cleaner header — brand, Sanitize/Restore and a single ⋯ menu for theme, text size, shortcuts, focus mode, feedback and sharing.
NEW One quiet status bar replaces the stats strip and the chip row; line icons instead of emoji throughout.
NEW The mapping panel starts collapsed so your logs get the room — it opens when you click a category, a tab or the arrow, and remembers your choice.
FIX Shorter labels (Sanitize ⌘↵, Copy), calmer colours, monospace data, better contrast for tokens in the light theme.
NEW Restored text now ends with a short “Sanitized & restored locally via datasanitizer.app” line on the free plan; Pro has the signature off by default and can switch it on in Options.

Feedback, sharing & privacy-first usage stats

September 2026

NEW 🐞 Report a problem right from the app — “it missed a value”, “redacted too much”, bug or idea. Optional diagnostics never include your text.
NEW ↗ Share the tool with a colleague (LinkedIn, X, Reddit, email, copy link).
NEW Optional anonymous usage stats — feature names and counts only, never your content; switch off any time in Options.
FIX Detection summary counts people once (name variants no longer inflate the count); node-18 / Win-Server-2019 are no longer treated as hostnames; “Redact all” now handles partial watch-term matches.

Hyphenated hostnames, date-safe

September 2026

NEW Multi-segment hostnames without a known role code (PAPAN1-AP-QWTDD, CORP-FS-MAIN, FINSRV-DC01) are detected.
FIX Dates in any common hyphenated form (16-Sep-2026, Tue-16-Sep-2026, 2026-09-16T08…, Q3-2026) are never treated as hostnames; nor are CVE / MITRE / ticket IDs, MACs, SIDs or cloud regions.

Clean watch-list tokens & person names

September 2026

FIX Watch-list terms match whole words only — BDO = ORG no longer produces soc@ORG_03soc.com; emails and domains containing the term are tokenized whole.
NEW Related tokens — DOMAIN_02 ↔ ORG_01 in the mapping table and Copy Legend, so the AI keeps context without seeing values.
NEW Partial matches (e.g. bdoagent) are listed in the leak banner for one-click redaction.
NEW Person names from ticket fields (Assigned to, Cc, Analysts, Name…) and from first.last@ emails; “Verdouw, Richard”, “R. Verdouw” and “Richard Verdouw” share one token.
FIX Person-name detection no longer removes line breaks.

Smarter AD & log detection, rock-solid tokens

September 2026

NEW Hebrew report fields — Display Name, Department, Title, Description (and their Hebrew labels) are tokenized, including Hebrew prefixes like ל/ו/ב.
NEW Free-text logs — usernames and hosts in sentences such as “User X has made failed logins on HOST” are detected.
NEW Machine accounts — AD accounts ending in $ (AD01$) become HOST_XX$, not users.
NEW Account Domain, Workstation Name and inline / TargetUserName= style fields; all field matching is case-insensitive.
NEW Change a Watch List term’s category from its row — the output updates instantly.
FIX System paths and binaries (Windows\system32\lsass.exe) are no longer treated as DOMAIN\USER.
FIX Tokens are never re-tokenized (no more mixed values like DOMAIN_03 → DOMAIN_02), and DOMAIN\user restores exactly.
FIX Tokens can’t be added to the Watch List; assigning a category from the selection menu applies immediately.
FIX Clear now resets the whole session (with Undo); the Restore tab opens with a clean input; emptying the input clears the output.

Deeper detection & a faster workflow

September 2026

NEW Secrets & credentials — API keys (AWS, Google, GitHub, Stripe, OpenAI), JWTs, bearer tokens, password= values, connection strings, private keys, payment cards, SSNs and IBANs, plus a high-entropy catch-all for unknown keys.
NEW IPv6 and cloud resource IDs (AWS ARNs, instance/volume/VPC ids) detection.
NEW Detection presets — one-click modes for Cloud/AWS, Windows/AD, Web app, Secrets-only and Strict.
NEW Highlight-what-changed view — every replaced value color-coded; hover to see the original, click to filter.
NEW Detection summary — a live count of exactly what was redacted, clickable to filter the mapping.
NEW Allowlist — values the engine always leaves alone, to kill false positives.
NEW Save / Open a case — resume a session later with identical tokens.
NEW Open file & drag-and-drop, word-wrap, find-in-output, and ⌘/Ctrl+Enter to sanitize.
NEW Undo a false-positive removal with Ctrl+Z.
NEW Document PII & HIPAA preset — optional detection of names, addresses, dates and postal codes for de-identifying records.
NEW 7-day Pro trial — try every Pro feature free, no card, right inside the app.
NEW Merge mappings — tick rows that are the same thing (an email, a full name, a first name) and merge them into one token.
NEW Select-to-sanitize now also works in the highlighted output — catch a leaked value from either side.
NEW Custom-term wildcards — NetScaler* = HOST consumes the whole connected identifier (NetScaler_Gateway_01 → one HOST_01 token).
NEW Operational presets — AI Safe Mode, Threat Hunting (preserve IOCs), and Internal Case Wrap-up.
NEW Leak-detection banner — warns if internal IPs, SIDs, domain\user, emails or keys slip through, with one-click "Redact these".
NEW Selection menu now has a whole-identifier toggle and Keep (allowlist) action.
NEW Paste, Sanitize & Copy in one shortcut — ⌘/Ctrl+Shift+V.
NEW AI prompt header — optionally prepend an instruction telling the AI to keep the placeholder tokens consistent.
NEW Side-by-side highlight — Highlight mode now colors both panes and cross-links a value to its token on hover.
NEW Click a token in the output to un-mask, re-tag its category, or find it in the table.
NEW ⇅ Sync scroll to keep both panes aligned line-for-line, and a compact single-line metrics bar.
NEW Light theme — toggle 🌙/☀️ in the header; your choice is remembered.
NEW Keyboard shortcuts — H highlight, R restore/sanitize, plus a redaction coverage % and a Copy Legend (token→category, no real values).
FIX Fast on very large logs — rebuilt the domain, email and credential matchers so even multi-megabyte or unusually-shaped pastes stay responsive.
FIX Sharper light theme — text, badges and buttons now meet WCAG AA contrast in both light and dark modes.
FIX A connection-string password followed by a real hostname (e.g. user:pass@db.example.com) is now always tokenized as a secret.

Enterprise log coverage — audited & expanded

A calmer, more focused workspace

Feedback, sharing & privacy-first usage stats

Hyphenated hostnames, date-safe

Clean watch-list tokens & person names

Smarter AD & log detection, rock-solid tokens

Deeper detection & a faster workflow

First public release