Mask sensitive data everywhere it leaks.
One detection engine finds and redacts PII and secrets in documents, logs, and AI pipelines — across every Zero Trust pillar. Built by a CISSP-certified identity security researcher. Zero retention, always.
ShroudCloud Redact
For legal, HR, insurance, and records teams. Upload a PDF or Word file, review every proposed redaction, and export a verifiably clean document with a complete audit trail.
Explore RedactShroudCloud API
For engineering teams. One API call masks names, emails, API keys, and session tokens before text reaches an LLM or a log, with reversible placeholders so your workflow keeps working.
Explore the APIOne engine. Every pillar.
Zero Trust isn't five walls, it's one posture. ShroudCloud's detection engine is built to sit where the data actually flows — across Identity, Devices, Networks, Applications, and Data.
| Pillar | Where ShroudCloud redacts |
|---|---|
| Identity | Auth and SSO audit logs, IAM telemetry, session records — JWTs, OAuth codes, bearer tokens |
| Devices | Endpoint telemetry, MDM inventory data, device logs before they hit the lake |
| Networks | DNS, NetFlow, email gateway logs — metadata and payloads stripped of identifiers |
| Applications | API payloads, support tickets, RAG pipelines, and LLM prompts before the model sees them |
| Data | DLP pipelines, documents, databases — masking, tokenization, verified-clean export |
Why ShroudCloud
Beyond PII.
Most tools stop at names and SSNs. ShroudCloud also catches identity artifacts: API keys, JWTs, OAuth codes, and session cookies — the things an identity researcher knows leak.
Nothing to leak.
Zero retention by design. Files and text are processed, verified clean, and destroyed. Nothing is stored, and nothing is ever used for training.
A person, not a logo.
Built by a CISSP-certified identity security researcher who publishes the research behind it — the same research that runs the open-source FlawedToken lab.
Not sure which fits?
Tell us what you're trying to protect and we'll point you the right way. Early access users set the roadmap.
No pricing announced yet. Early access users lock in founding terms.