Scan TypeScript, JavaScript, Python, Go, Java, and C# for personally identifiable information. Map findings to GDPR, CCPA, and APPI articles.
Email, phone, SSN, credit card, My Number (Japan), IBAN (EU), biometric data, health records, API keys, and more.
Tracks PII from user input to logs, databases, third-party APIs, and HTTP responses. Cross-file import/export analysis.
Maps each finding to specific GDPR articles, CCPA sections, and APPI provisions. Generate auditor-ready compliance reports.
SARIF output for GitHub Code Scanning. --fail-on exit codes for CI gates. GitHub Action and baseline diff scanning.
Real-time PII detection with inline warnings and quick-fix code actions as you type. LSP-based, works with any editor.
Built in Rust with tree-sitter AST parsing. Single 5 MB binary. No runtime dependencies. Runs on Linux, macOS, Windows.