deemwar redact
Scrub secrets from anything you share
Drop an asciinema .cast, a terminal-recording .svg, a Jupyter.ipynb, or a Terraform .tfstate — one tool auto-detects the format. Every API key, token, JWT and .env value gets masked (in notebook outputsand Terraform's own sensitive_attributes too) — same width, so nothing shifts.
Runs entirely in your browser — your recording never leaves your machine. We never see it.
Going past a one-off?
The tool here is free and runs in your browser. deemwar redact — Team is the same engine, set up across your team's CI by deemwar.
Free — this tool
In your browser, nothing to set up
- Redact .cast & .svg recordings, Jupyter .ipynb notebooks AND Terraform .tfstate — right here, in your browser
- Built-in gitleaks-style rules — AWS, GitHub, OpenAI, Stripe, JWTs, .env values
- Nothing uploaded — your recording never leaves your machine
deemwar redact — Team
Set up by deemwar — talk to us (not self-serve yet)
- CI gate across all your repos — fail the build on a leaked secret in any .cast/.svg/.ipynb/.tfstate
- Org-shared custom rulesets — your team’s patterns, everywhere
- An audit report of what was caught
- Set up & maintained for you by deemwar
Set up deemwar redact — Team for your team
Tell us your repos/CI and we'll wire it up — org rulesets, an audit report, and the CI gate. No self-serve checkout; a real engineer sets it up with you.