Masking of secrets and personal data before external LLM calls
Prompts are masked before they leave for an external provider. By default credentials and secrets are masked; wider personal-data masking is a configuration option (LLM_PII_MASK).
Status
Available
Implemented and covered by automated tests.
Good to know
Masking reduces exposure; it is not a guarantee. Local models keep data on the operator's infrastructure.
See it on your own alerts.
Book a walkthrough with the team. We will show the platform end to end, tell you what is production-ready and what is not, and discuss how it would sit next to your existing SIEM.