Library Rules
KubeSense ships 484 built-in rules for detecting and masking sensitive data. Use them in a scanning group to find data, or as What to protect in a Protect rule to mask it. The Catalog tab in Logs > Sensitive Data shows the same list with each rule's pattern.
| Category | Rules | What it covers |
|---|---|---|
| Payment & Banking | 12 | Card numbers by network, IBAN, ABA routing numbers, crypto wallet addresses |
| PII | 70 | Email addresses, phone numbers, passports, and national identifiers for the US, UK, EU countries, India, China, Brazil, Canada, Australia and more |
| Secrets & Credentials | 398 | API keys and tokens for cloud providers and SaaS vendors, private keys, passwords in URLs and fields, bearer tokens, JWTs |
| Network & Device | 4 | IPv4 and IPv6 addresses, MAC addresses, URLs |
Reading the Tables
| Column | Description |
|---|---|
| Rule | The rule's name, as it appears in findings |
| ID | The rule's stable identifier |
| Compliance | Frameworks the data falls under: PCI-DSS, GDPR, HIPAA, SOC2 |
| Severity | Critical, High, Medium or Low |
| Validation | Luhn: a card-shaped number must pass the card checksum to count. None: every match counts |
| Default | Off: noisy on most logs, so not added by Add recommended. You can still add it by hand |
How Rules Match
- Fixed formats — tokens with a distinctive shape (a known prefix and length, such as
glpat-…,xoxb-…orAKIA…) match wherever they appear. - Keyword context — values with no distinctive shape (bare digit runs, generic keys) match only next to a keyword, such as
ssn:,peseloraws_secret_access_key=. A value without its keyword is not found. - Masked part — every rule masks only the sensitive value, not the keyword or label around it.
Need something the library does not cover? Add a custom rule.
Payment & Banking
12 rules.
| Rule | ID | Compliance | Severity | Validation | Default |
|---|---|---|---|---|---|
| ABA routing number | aba_routing_number | PCI-DSS | High | None | On |
| American Express card | amex_card | PCI-DSS | Critical | Luhn | On |
| Bitcoin wallet address | bitcoin_address | PCI-DSS | Medium | None | On |
| Diners Club card | diners_card | PCI-DSS | Critical | Luhn | On |
| Discover card | discover_card | PCI-DSS | Critical | Luhn | On |
| ERC-20 wallet address | ethereum_address | PCI-DSS | Medium | None | On |
| IBAN | iban | PCI-DSS | High | None | On |
| JCB card | jcb_card | PCI-DSS | Critical | Luhn | On |
| Maestro card | maestro_card | PCI-DSS | Critical | Luhn | On |
| MasterCard | mastercard | PCI-DSS | Critical | Luhn | On |
| Monero wallet address | monero_address | PCI-DSS | Medium | None | On |
| Visa card | visa_card | PCI-DSS | Critical | Luhn | On |
PII
70 rules.
| Rule | ID | Compliance | Severity | Validation | Default |
|---|---|---|---|---|---|
| Australia Medicare number | au_medicare_number | HIPAA, GDPR | High | None | On |
| Australia tax file number | au_tax_file_number | GDPR | High | None | On |
| Austria social security number | at_social_security_number | GDPR | High | None | On |
| Belgium national register number | be_national_register_number | GDPR | High | None | On |
| Brazil CNPJ | br_cnpj | GDPR | Medium | None | On |
| Brazil CPF | br_cpf | GDPR | High | None | On |
| Bulgaria unified civil number | bg_unified_civil_number | GDPR | High | None | On |
| Canada Social Insurance number | ca_social_insurance_number | GDPR | High | None | On |
| China passport number | cn_passport | GDPR | High | None | On |
| China phone number | cn_phone_number | GDPR | Medium | None | On |
| China resident identity card number | cn_resident_identity_card | GDPR | High | None | On |
| China vehicle license plate number | cn_vehicle_license_plate | GDPR | High | None | On |
| Croatia health insurance number | hr_health_insurance_number | GDPR | High | None | On |
| Croatia personal identification number (OIB) | hr_personal_identification_number | GDPR | High | None | On |
| Cyprus identity card number | cy_identity_card_number | GDPR | High | None | On |
| Cyprus tax identification number | cy_tax_identification_number | GDPR | High | None | On |
| Czechia personal identity number | cz_personal_identity_number | GDPR | High | None | On |
| Czechia tax identification number | cz_tax_identification_number | GDPR | High | None | On |
| Email address | email_address | GDPR | Medium | None | On |
| Estonia personal identification code | ee_personal_identification_code | GDPR | High | None | On |
| Finland personal identity code | fi_personal_identity_code | GDPR | High | None | On |
| France social security number | fr_social_security_number | GDPR | High | None | On |
| France tax identification number | fr_tax_identification_number | GDPR | High | None | On |
| Germany driver's license number | de_drivers_license_number | GDPR | High | None | On |
| Germany identity card number | de_identity_card_number | GDPR | High | None | On |
| Germany social security number | de_social_security_number | GDPR | High | None | On |
| Germany tax identification number | de_tax_id | GDPR | High | None | On |
| Greece identity card number | gr_identity_card_number | GDPR | High | None | On |
| Greece social security number (AMKA) | gr_social_security_number | GDPR | High | None | On |
| Greece tax identification number (AFM) | gr_tax_identification_number | GDPR | High | None | On |
| Human name (name fields) | human_name | GDPR | Low | None | Off |
| Hungary personal identification number | hu_personal_identification_number | GDPR | High | None | On |
| Hungary social security number (TAJ) | hu_social_security_number | GDPR | High | None | On |
| Hungary tax identification number | hu_tax_identification_number | GDPR | High | None | On |
| India Aadhaar number | in_aadhaar | GDPR | Critical | None | On |
| India PAN | in_pan | GDPR | High | None | On |
| India phone number | in_phone_number | GDPR | Medium | None | On |
| Ireland personal public service number | ie_personal_public_service_number | GDPR | High | None | On |
| Italy codice fiscale | it_codice_fiscale | GDPR | High | None | On |
| Italy identity card number | it_identity_card_number | GDPR | High | None | On |
| Latvia personal identification number | lv_personal_identification_number | GDPR | High | None | On |
| Lithuania personal identification number | lt_personal_identification_number | GDPR | High | None | On |
| Luxembourg national identification number | lu_national_identification_number | GDPR | High | None | On |
| Malta identity card number | mt_identity_card_number | GDPR | High | None | On |
| Netherlands citizen service number | nl_bsn | GDPR | High | None | On |
| Passport number | passport_number | GDPR | High | None | On |
| Phone number | phone_number | GDPR | Medium | None | On |
| Poland personal identification number (PESEL) | pl_pesel | GDPR | High | None | On |
| Poland tax identification number (NIP) | pl_tax_identification_number | GDPR | High | None | On |
| Portugal social security number (NISS) | pt_social_security_number | GDPR | High | None | On |
| Portugal tax identification number (NIF) | pt_tax_identification_number | GDPR | High | None | On |
| Romania personal numeric code (CNP) | ro_personal_numeric_code | GDPR | High | None | On |
| Singapore NRIC | sg_nric | GDPR | High | None | On |
| Slovenia personal identification number (EMSO) | si_personal_identification_number | GDPR | High | None | On |
| Slovenia tax identification number | si_tax_identification_number | GDPR | High | None | On |
| South Korea resident registration number | kr_resident_registration_number | GDPR | High | None | On |
| Spain DNI | es_dni | GDPR | High | None | On |
| Spain social security number | es_social_security_number | GDPR | High | None | On |
| Sweden coordination number | se_coordination_number | GDPR | High | None | On |
| Sweden personal identity number | se_personal_identity_number | GDPR | High | None | On |
| UK National Insurance number | uk_national_insurance_number | GDPR | High | None | On |
| UK NHS number | uk_nhs_number | HIPAA, GDPR | High | None | On |
| US DEA number | us_dea_number | HIPAA, GDPR | Medium | None | On |
| US driver's license number | us_drivers_license | GDPR | High | None | On |
| US Employer Identification Number | us_ein | GDPR | Medium | None | On |
| US ITIN | us_itin | GDPR | High | None | On |
| US National Provider Identifier | us_npi | HIPAA, GDPR | Medium | None | On |
| US phone number | us_phone_number | GDPR | Medium | None | On |
| US Social Security number | us_ssn | HIPAA, GDPR | Critical | None | On |
| Vehicle identification number | vehicle_identification_number | GDPR | Medium | None | On |
Secrets & Credentials
398 rules.
| Rule | ID | Compliance | Severity | Validation | Default |
|---|---|---|---|---|---|
| 1Password Events API Token | 1password_events_api_token | SOC2 | High | None | On |
| 1Password Secret Key | 1password_secret_key | SOC2 | High | None | On |
| 1Password Service Account Key | 1password_service_account_key | SOC2 | High | None | On |
| Adafruit IO Key | adafruit_io_key | SOC2 | High | None | On |
| Adobe Access Token | adobe_access_token | SOC2 | High | None | On |
| Adobe API Key | adobe_api_key | SOC2 | High | None | On |
| Adobe Client Secret | adobe_client_secret | SOC2 | High | None | On |
| Adobe Refresh Token | adobe_refresh_token | SOC2 | High | None | On |
| Age Secret Key | age_secret_key | SOC2 | High | None | On |
| Aikido API Client Secret | aikido_api_client_secret | SOC2 | High | None | On |
| Aikido Broker Token | aikido_broker_token | SOC2 | High | None | On |
| Aikido CI Scanning Token | aikido_ci_scanning_token | SOC2 | High | None | On |
| Aikido REST API Access Token | aikido_rest_api_access_token | SOC2 | High | None | On |
| Airtable OAuth Token | airtable_oauth_token | SOC2 | High | None | On |
| Airtable Personal Access Token | airtable_personal_access_token | SOC2 | High | None | On |
| Aiven Default Service Password | aiven_default_service_password | SOC2 | High | None | On |
| Aiven Personal Token | aiven_personal_token | SOC2 | High | None | On |
| Algolia API Key | algolia_api_key | SOC2 | High | None | On |
| Alibaba Cloud AccessKey Secret | alibaba_cloud_accesskey_secret | SOC2 | High | None | On |
| Alibaba Cloud STS AccessKey Secret | alibaba_cloud_sts_accesskey_secret | SOC2 | High | None | On |
| Amazon Marketplace Web Services Auth Token | amazon_marketplace_web_services_auth_token | SOC2 | High | None | On |
| Amplitude Secret Key | amplitude_secret_key | SOC2 | High | None | On |
| Anthropic API key | anthropic_api_key | SOC2 | Critical | None | On |
| Apify API Token | apify_api_token | SOC2 | High | None | On |
| Apify Proxy Password | apify_proxy_password | SOC2 | High | None | On |
| Apify UI Token | apify_ui_token | SOC2 | High | None | On |
| Asana Client Secret | asana_client_secret | SOC2 | High | None | On |
| Asana OAuth Token | asana_oauth_token | SOC2 | High | None | On |
| Asana Personal Access Token | asana_personal_access_token | SOC2 | High | None | On |
| AssemblyAI API Key | assemblyai_api_key | SOC2 | High | None | On |
| Atlassian Access Token | atlassian_access_token | SOC2 | High | None | On |
| Atlassian API Token | atlassian_api_token | SOC2 | High | None | On |
| Atlassian API Token (legacy) | atlassian_api_token_legacy | SOC2 | High | None | On |
| Atlassian Client Secret | atlassian_client_secret | SOC2 | High | None | On |
| Atlassian Refresh Token | atlassian_refresh_token | SOC2 | High | None | On |
| Authress Service Client Access Key | authress_service_client_access_key | SOC2 | High | None | On |
| AWS access key ID | aws_access_key_id | SOC2 | Critical | None | On |
| AWS Bedrock Long-Term API Key | aws_bedrock_long_term_api_key | SOC2 | High | None | On |
| AWS Bedrock Short-Term API Key | aws_bedrock_short_term_api_key | SOC2 | High | None | On |
| AWS secret access key | aws_secret_access_key | SOC2 | Critical | None | On |
| AWS Session Token | aws_session_token | SOC2 | High | None | On |
| Azure AI Services Key | azure_ai_services_key | SOC2 | High | None | On |
| Azure API Management Direct Management Key | azure_api_management_direct_management_key | SOC2 | High | None | On |
| Azure AppConfig Connection Key | azure_appconfig_connection_key | SOC2 | High | None | On |
| Azure Batch Account Key | azure_batch_account_key | SOC2 | High | None | On |
| Azure Bot Service App Secret | azure_bot_service_app_secret | SOC2 | High | None | On |
| Azure Cache for Redis Connection String | azure_cache_for_redis_connection_string | SOC2 | High | None | On |
| Azure Communication Services Key | azure_communication_services_key | SOC2 | High | None | On |
| Azure Container Registry Admin Key | azure_container_registry_admin_key | SOC2 | High | None | On |
| Azure Container Registry Key | azure_container_registry_key | SOC2 | High | None | On |
| Azure DevOps Personal Access Token | azure_devops_personal_access_token | SOC2 | High | None | On |
| Azure Entra Client Secret | azure_entra_client_secret | SOC2 | High | None | On |
| Azure Entra ID Token | azure_entra_id_token | SOC2 | High | None | On |
| Azure Event Grid Access Key | azure_event_grid_access_key | SOC2 | High | None | On |
| Azure Fluid Relay Key | azure_fluid_relay_key | SOC2 | High | None | On |
| Azure Function Key | azure_function_key | SOC2 | High | None | On |
| Azure IoT Device Key | azure_iot_device_key | SOC2 | High | None | On |
| Azure IoT Device Provisioning Service Connection String | azure_iot_device_provisioning_service_connection_string | SOC2 | High | None | On |
| Azure Maps Subscription Key | azure_maps_subscription_key | SOC2 | High | None | On |
| Azure ML Inference Endpoint Key | azure_ml_inference_endpoint_key | SOC2 | High | None | On |
| Azure OpenAI Key | azure_openai_key | SOC2 | High | None | On |
| Azure Quantum API Key | azure_quantum_api_key | SOC2 | High | None | On |
| Azure Search Admin Key | azure_search_admin_key | SOC2 | High | None | On |
| Azure shared access key | azure_shared_access_key | SOC2 | Critical | None | On |
| Azure shared access signature | azure_sas_token | SOC2 | High | None | On |
| Azure SignalR Service Access Key | azure_signalr_service_access_key | SOC2 | High | None | On |
| Azure SQL Connection Password | azure_sql_connection_password | SOC2 | High | None | On |
| Azure storage account key | azure_storage_account_key | SOC2 | Critical | None | On |
| Azure Subscription Key | azure_subscription_key | SOC2 | High | None | On |
| Azure Web PubSub Access Key | azure_web_pubsub_access_key | SOC2 | High | None | On |
| Beamer API Token | beamer_api_token | SOC2 | High | None | On |
| Bearer token | bearer_token | SOC2 | Critical | None | On |
| Bitbucket Access Token | bitbucket_access_token | SOC2 | High | None | On |
| Bitbucket Client Secret | bitbucket_client_secret | SOC2 | High | None | On |
| Bitbucket OAuth Access Token | bitbucket_oauth_access_token | SOC2 | High | None | On |
| Bitbucket OAuth Refresh Token | bitbucket_oauth_refresh_token | SOC2 | High | None | On |
| Bitly Access Token | bitly_access_token | SOC2 | High | None | On |
| Bitrise Access Token | bitrise_access_token | SOC2 | High | None | On |
| Box API Access Token | box_api_access_token | SOC2 | High | None | On |
| Brave Search API Key | brave_search_api_key | SOC2 | High | None | On |
| BuildKite Access Token | buildkite_access_token | SOC2 | High | None | On |
| BuildKite Agent Session Token | buildkite_agent_session_token | SOC2 | High | None | On |
| BuildKite Cluster Token | buildkite_cluster_token | SOC2 | High | None | On |
| BuildKite Portal Secret | buildkite_portal_secret | SOC2 | High | None | On |
| BuildKite Portal Token | buildkite_portal_token | SOC2 | High | None | On |
| BuildKite Registry Token | buildkite_registry_token | SOC2 | High | None | On |
| BuildKite Temporary Registry Token | buildkite_temporary_registry_token | SOC2 | High | None | On |
| BuildKite Unclustered Agent Token | buildkite_unclustered_agent_token | SOC2 | High | None | On |
| Canva Client Secret | canva_client_secret | SOC2 | High | None | On |
| Cerebras API Key | cerebras_api_key | SOC2 | High | None | On |
| Cfx.re Server Registration Key | cfx_re_server_registration_key | SOC2 | High | None | On |
| Checkout.com API Secret Key | checkout_com_api_secret_key | SOC2 | High | None | On |
| CircleCI Personal Access Token | circleci_personal_access_token | SOC2 | High | None | On |
| CircleCI Project Access Token | circleci_project_access_token | SOC2 | High | None | On |
| Cisco Meraki API Key | cisco_meraki_api_key | SOC2 | High | None | On |
| Civo API Key | civo_api_key | SOC2 | High | None | On |
| Clerk Secret Key | clerk_secret_key | SOC2 | High | None | On |
| ClickHouse Cloud API Secret Key | clickhouse_cloud_api_secret_key | SOC2 | High | None | On |
| ClickUp Personal API Token | clickup_personal_api_token | SOC2 | High | None | On |
| Clojars Deploy Token | clojars_deploy_token | SOC2 | High | None | On |
| Cloudflare API Token | cloudflare_api_token | SOC2 | High | None | On |
| Cloudflare Global API Key | cloudflare_global_api_key | SOC2 | High | None | On |
| Cloudflare Origin CA Key | cloudflare_origin_ca_key | SOC2 | High | None | On |
| Cloudinary API Secret | cloudinary_api_secret | SOC2 | High | None | On |
| Cloudinary API secret (keyword) | cloudinary_api_secret_keyword | SOC2 | High | None | On |
| Cloudsmith API Key | cloudsmith_api_key | SOC2 | High | None | On |
| CockroachDB Cloud API Key | cockroachdb_cloud_api_key | SOC2 | High | None | On |
| Codecov Access Token | codecov_access_token | SOC2 | High | None | On |
| Cohere API Key | cohere_api_key | SOC2 | High | None | On |
| ConfigCat Public API Password | configcat_public_api_password | SOC2 | High | None | On |
| ConfigCat SDK Key | configcat_sdk_key | SOC2 | High | None | On |
| Confluent Access Token | confluent_access_token | SOC2 | High | None | On |
| Confluent API Secret | confluent_api_secret | SOC2 | High | None | On |
| Contentful Access Token | contentful_access_token | SOC2 | High | None | On |
| Couchbase Capella API Key | couchbase_capella_api_key | SOC2 | High | None | On |
| Coveralls Personal API Token | coveralls_personal_api_token | SOC2 | High | None | On |
| Crates.io API Key | crates_io_api_key | SOC2 | High | None | On |
| Credentials in URL | url_credentials | SOC2 | Critical | None | On |
| Cursor API Key | cursor_api_key | SOC2 | High | None | On |
| Data.gov API Key | data_gov_api_key | SOC2 | High | None | On |
| Databento API Key | databento_api_key | SOC2 | High | None | On |
| Databricks Personal Access Token | databricks_personal_access_token | SOC2 | High | None | On |
| Databricks Session Token | databricks_session_token | SOC2 | High | None | On |
| Datadog API key | datadog_api_key | SOC2 | Critical | None | On |
| Datadog application key | datadog_app_key | SOC2 | Critical | None | On |
| Datadog Nonce Session Token | datadog_nonce_session_token | SOC2 | High | None | On |
| Datadog OAuth Tokens | datadog_oauth_tokens | SOC2 | High | None | On |
| Datadog Personal Access Token | datadog_personal_access_token | SOC2 | High | None | On |
| Datadog Prefixed Application Key | datadog_prefixed_application_key | SOC2 | High | None | On |
| DataStax Astra Application Token | datastax_astra_application_token | SOC2 | High | None | On |
| Deepgram API Key | deepgram_api_key | SOC2 | High | None | On |
| Deepseek API Key | deepseek_api_key | SOC2 | High | None | On |
| Defined Networking API Token | defined_networking_api_token | SOC2 | High | None | On |
| Deno Organization Access Token | deno_organization_access_token | SOC2 | High | None | On |
| Deno Personal Access Token | deno_personal_access_token | SOC2 | High | None | On |
| DevCycle Client SDK Key | devcycle_client_sdk_key | SOC2 | High | None | On |
| DevCycle Management API Secret | devcycle_management_api_secret | SOC2 | High | None | On |
| DevCycle Mobile SDK Key | devcycle_mobile_sdk_key | SOC2 | High | None | On |
| DevCycle Server SDK Key | devcycle_server_sdk_key | SOC2 | High | None | On |
| Devin Personal API Key | devin_personal_api_key | SOC2 | High | None | On |
| Devin Service API Key | devin_service_api_key | SOC2 | High | None | On |
| DigitalOcean token | digitalocean_token | SOC2 | Critical | None | On |
| DigitalOcean token (legacy) | digitalocean_token_legacy | SOC2 | High | None | On |
| Discord Application OAuth Access Token | discord_application_oauth_access_token | SOC2 | High | None | On |
| Discord Application OAuth Secret Key | discord_application_oauth_secret_key | SOC2 | High | None | On |
| Discord Application Token | discord_application_token | SOC2 | High | None | On |
| Discord Bot Token | discord_bot_token | SOC2 | High | None | On |
| Discord Webhook Codes | discord_webhook_codes | SOC2 | High | None | On |
| Disqus API Key | disqus_api_key | SOC2 | High | None | On |
| Docker Access Token | docker_access_token | SOC2 | High | None | On |
| Docker Organization Access Token | docker_organization_access_token | SOC2 | High | None | On |
| Docker Personal Access Token | docker_personal_access_token | SOC2 | High | None | On |
| Docker Swarm Join Token | docker_swarm_join_token | SOC2 | High | None | On |
| Docker Swarm Unlock Key | docker_swarm_unlock_key | SOC2 | High | None | On |
| Doppler Access Token | doppler_access_token | SOC2 | High | None | On |
| Droneci Access Token | droneci_access_token | SOC2 | High | None | On |
| Dropbox Access Token | dropbox_access_token | SOC2 | High | None | On |
| Duffel Test Access Token | duffel_test_access_token | SOC2 | High | None | On |
| Dynatrace Token | dynatrace_token | SOC2 | High | None | On |
| EasyPost API Key | easypost_api_key | SOC2 | High | None | On |
| Elastic API Key | elastic_api_key | SOC2 | High | None | On |
| ElevenLabs API Key | elevenlabs_api_key | SOC2 | High | None | On |
| Endor Labs API Key | endor_labs_api_key | SOC2 | High | None | On |
| Etsy Open API Key | etsy_open_api_key | SOC2 | High | None | On |
| Exoscale API Key | exoscale_api_key | SOC2 | High | None | On |
| Exoscale API Secret | exoscale_api_secret | SOC2 | High | None | On |
| Facebook Access Token | facebook_access_token | SOC2 | High | None | On |
| Facebook App Secret | facebook_app_secret | SOC2 | High | None | On |
| Fastly API Token | fastly_api_token | SOC2 | High | None | On |
| Figma Personal Access Token | figma_personal_access_token | SOC2 | High | None | On |
| Finicity API Token | finicity_api_token | SOC2 | High | None | On |
| Finicity Client Secret | finicity_client_secret | SOC2 | High | None | On |
| Finnhub Access Token | finnhub_access_token | SOC2 | High | None | On |
| Firebase Cloud Messaging Device Token | firebase_cloud_messaging_device_token | SOC2 | High | None | On |
| Flutterwave API Secret Key | flutterwave_api_secret_key | SOC2 | High | None | On |
| Fly.io Access Token | fly_io_access_token | SOC2 | High | None | On |
| Frame.io Developer Token | frame_io_developer_token | SOC2 | High | None | On |
| Frame.io OAuth Secret | frame_io_oauth_secret | SOC2 | High | None | On |
| Frame.io OAuth Session Secret | frame_io_oauth_session_secret | SOC2 | High | None | On |
| Freemius Secret Key | freemius_secret_key | SOC2 | High | None | On |
| FreshBooks Access Token | freshbooks_access_token | SOC2 | High | None | On |
| Gitea Access Token | gitea_access_token | SOC2 | High | None | On |
| GitHub fine-grained personal access token | github_fine_grained_token | SOC2 | Critical | None | On |
| Github Refresh Token | github_refresh_token | SOC2 | High | None | On |
| GitHub token | github_token | SOC2 | Critical | None | On |
| Gitlab Application OAuth Secret | gitlab_application_oauth_secret | SOC2 | High | None | On |
| Gitlab Feature Flags Client Token | gitlab_feature_flags_client_token | SOC2 | High | None | On |
| Gitlab Feed Token | gitlab_feed_token | SOC2 | High | None | On |
| Gitlab Incoming Mail Token | gitlab_incoming_mail_token | SOC2 | High | None | On |
| Gitlab Kubernetes Agent Token | gitlab_kubernetes_agent_token | SOC2 | High | None | On |
| Gitlab Runner Authentication Token | gitlab_runner_authentication_token | SOC2 | High | None | On |
| Gitlab Runner Authentication Token Routable | gitlab_runner_authentication_token_routable | SOC2 | High | None | On |
| Gitlab Runner Registration Token | gitlab_runner_registration_token | SOC2 | High | None | On |
| Gitlab SCIM Token | gitlab_scim_token | SOC2 | High | None | On |
| Gitlab Session Cookie | gitlab_session_cookie | SOC2 | High | None | On |
| GitLab token | gitlab_token | SOC2 | Critical | None | On |
| GoCardless API Token | gocardless_api_token | SOC2 | High | None | On |
| Google API key | gcp_api_key | SOC2 | Critical | None | On |
| Google Client Secret | google_client_secret | SOC2 | High | None | On |
| Google Cloud Application Default Credentials Refresh Token | google_cloud_application_default_credentials_refresh_token | SOC2 | High | None | On |
| Google Cloud Service Account Bound API Key | google_cloud_service_account_bound_api_key | SOC2 | High | None | On |
| Google Cloud service account key | gcp_service_account_key | SOC2 | Critical | None | On |
| Google Cloud Service Account OAuth Access Token | google_cloud_service_account_oauth_access_token | SOC2 | High | None | On |
| Google Cloud Storage Access Key ID | google_cloud_storage_access_key_id | SOC2 | High | None | On |
| Google Cloud Storage Access Key Secret | google_cloud_storage_access_key_secret | SOC2 | High | None | On |
| Google OAuth Access Token | google_oauth_access_token | SOC2 | High | None | On |
| Grafana Cloud Access Token | grafana_cloud_access_token | SOC2 | High | None | On |
| Grafana Legacy API Key | grafana_legacy_api_key | SOC2 | High | None | On |
| Grafana service account token | grafana_service_account_token | SOC2 | Critical | None | On |
| Greptile API Key | greptile_api_key | SOC2 | High | None | On |
| Groq API Key | groq_api_key | SOC2 | High | None | On |
| Gumroad Access Token | gumroad_access_token | SOC2 | High | None | On |
| Harness Personal Account Token | harness_personal_account_token | SOC2 | High | None | On |
| Harness Service Account Token | harness_service_account_token | SOC2 | High | None | On |
| HashiCorp Vault token | hashicorp_vault_token | SOC2 | Critical | None | On |
| Heroku API Key | heroku_api_key | SOC2 | High | None | On |
| Heroku API Key v2 | heroku_api_key_v2 | SOC2 | High | None | On |
| Highnote Restricted Live API Key | highnote_restricted_live_api_key | SOC2 | High | None | On |
| Highnote Restricted Test API Key | highnote_restricted_test_api_key | SOC2 | High | None | On |
| Highnote Secret Live API Key | highnote_secret_live_api_key | SOC2 | High | None | On |
| Highnote Secret Test API Key | highnote_secret_test_api_key | SOC2 | High | None | On |
| Honeycomb API Key | honeycomb_api_key | SOC2 | High | None | On |
| Honeycomb API key (classic) | honeycomb_configuration_key | SOC2 | High | None | On |
| HTTP Basic authentication header | basic_auth_header | SOC2 | Critical | None | On |
| HTTP Cookie | http_cookie | SOC2 | High | None | On |
| Hubspot Developer API Key | hubspot_developer_api_key | SOC2 | High | None | On |
| Hubspot Personal Access Key | hubspot_personal_access_key | SOC2 | High | None | On |
| Hugging Face access token | huggingface_token | SOC2 | Critical | None | On |
| Hugging Face Organization API Token | hugging_face_organization_api_token | SOC2 | High | None | On |
| InfluxDB API Token | influxdb_api_token | SOC2 | High | None | On |
| Infomaniak API Token | infomaniak_api_token | SOC2 | High | None | On |
| Instagram Token | instagram_token | SOC2 | High | None | On |
| Intercom Access Token | intercom_access_token | SOC2 | High | None | On |
| Ionic Personal Access Token | ionic_personal_access_token | SOC2 | High | None | On |
| JFrog Platform Access Token | jfrog_platform_access_token | SOC2 | High | None | On |
| JFrog Platform Reference Token | jfrog_platform_reference_token | SOC2 | High | None | On |
| JIRA API Token | jira_api_token | SOC2 | High | None | On |
| JSON Web Token | json_web_token | SOC2 | High | None | On |
| JumpCloud API Key | jumpcloud_api_key | SOC2 | High | None | On |
| JumpCloud API key (classic) | jumpcloud_api_key_classic | SOC2 | High | None | On |
| Kagi API Key | kagi_api_key | SOC2 | High | None | On |
| Kimi API Key | kimi_api_key | SOC2 | High | None | On |
| Klaviyo Private API Key | klaviyo_private_api_key | SOC2 | High | None | On |
| LangChain Personal Access Token | langchain_personal_access_token | SOC2 | High | None | On |
| LangChain Service Key | langchain_service_key | SOC2 | High | None | On |
| Lark/Feishu App Secret | lark_feishu_app_secret | SOC2 | High | None | On |
| Lark/Feishu Tenant Access Token | lark_feishu_tenant_access_token | SOC2 | High | None | On |
| Lark/Feishu User Grant Token | lark_feishu_user_grant_token | SOC2 | High | None | On |
| Lark/Feishu User Session Token | lark_feishu_user_session_token | SOC2 | High | None | On |
| LaunchDarkly Access Token | launchdarkly_access_token | SOC2 | High | None | On |
| Lichess Personal Access Token | lichess_personal_access_token | SOC2 | High | None | On |
| LightOn API Key | lighton_api_key | SOC2 | High | None | On |
| Linear API Key | linear_api_key | SOC2 | High | None | On |
| Linear Developer Token | linear_developer_token | SOC2 | High | None | On |
| Linear OAuth Client Secret | linear_oauth_client_secret | SOC2 | High | None | On |
| LinkedIn Secret | linkedin_secret | SOC2 | High | None | On |
| LinkedIn Token | linkedin_token | SOC2 | High | None | On |
| Lob API Key | lob_api_key | SOC2 | High | None | On |
| Mailchimp API Key | mailchimp_api_key | SOC2 | High | None | On |
| Mailgun API Key | mailgun_api_key | SOC2 | High | None | On |
| Mailgun API Key v2 | mailgun_api_key_v2 | SOC2 | High | None | On |
| Mapbox Secret Access Token | mapbox_secret_access_token | SOC2 | High | None | On |
| Mattermost Access Token | mattermost_access_token | SOC2 | High | None | On |
| Maxmind License Key | maxmind_license_key | SOC2 | High | None | On |
| MessageBird API Token | messagebird_api_token | SOC2 | High | None | On |
| MiniMax API Key | minimax_api_key | SOC2 | High | None | On |
| Mistral API Key | mistral_api_key | SOC2 | High | None | On |
| Mongo Model API Key | mongo_model_api_key | SOC2 | High | None | On |
| MongoDB Atlas Database URI with Credentials | mongodb_atlas_database_uri_with_credentials | SOC2 | High | None | On |
| MongoDB Atlas Programmatic API Private Key | mongodb_atlas_programmatic_api_private_key | SOC2 | High | None | On |
| MongoDB Atlas Service Account Secret | mongodb_atlas_service_account_secret | SOC2 | High | None | On |
| Naver Cloud Platform Access Key | naver_cloud_platform_access_key | SOC2 | High | None | On |
| Naver Cloud Platform Access Key Secret | naver_cloud_platform_access_key_secret | SOC2 | High | None | On |
| Naver Cloud Platform STS Access Key | naver_cloud_platform_sts_access_key | SOC2 | High | None | On |
| Naver Cloud Platform STS Access Key Secret | naver_cloud_platform_sts_access_key_secret | SOC2 | High | None | On |
| Netlify Access Token | netlify_access_token | SOC2 | High | None | On |
| New Relic Licence Key | new_relic_licence_key | SOC2 | High | None | On |
| New Relic User API Key | new_relic_user_api_key | SOC2 | High | None | On |
| Notion Integration Token | notion_integration_token | SOC2 | High | None | On |
| npm access token | npm_token | SOC2 | Critical | None | On |
| npm access token (legacy, .npmrc) | npm_legacy_token | SOC2 | High | None | On |
| NuGet API Key | nuget_api_key | SOC2 | High | None | On |
| Nvidia API Key | nvidia_api_key | SOC2 | High | None | On |
| Octopus Deploy API Key | octopus_deploy_api_key | SOC2 | High | None | On |
| Okta API Token | okta_api_token | SOC2 | High | None | On |
| OpenAI API key | openai_api_key | SOC2 | Critical | None | On |
| OpenRouter API Key | openrouter_api_key | SOC2 | High | None | On |
| Oracle Access Token | oracle_access_token | SOC2 | High | None | On |
| Oracle API Signing Key | oracle_api_signing_key | SOC2 | High | None | On |
| Oracle Auth Token | oracle_auth_token | SOC2 | High | None | On |
| Oracle Customer Secret Key | oracle_customer_secret_key | SOC2 | High | None | On |
| OVHcloud Application Secret | ovhcloud_application_secret | SOC2 | High | None | On |
| PagerDuty API Token | pagerduty_api_token | SOC2 | High | None | On |
| PagerDuty OAuth Classic Secret | pagerduty_oauth_classic_secret | SOC2 | High | None | On |
| PagerDuty OAuth Scoped Secret | pagerduty_oauth_scoped_secret | SOC2 | High | None | On |
| Password field | password_field | SOC2 | Critical | None | On |
| Paypal Braintree Access Token | paypal_braintree_access_token | SOC2 | High | None | On |
| Perplexity API Key | perplexity_api_key | SOC2 | High | None | On |
| PGP Private Key | pgp_private_key | SOC2 | High | None | On |
| Plaid API Secret | plaid_api_secret | SOC2 | High | None | On |
| PlanetScale API Token | planetscale_api_token | SOC2 | High | None | On |
| Polar Access Token | polar_access_token | SOC2 | High | None | On |
| Polar Authorization Code | polar_authorization_code | SOC2 | High | None | On |
| Polar Client Registration Token | polar_client_registration_token | SOC2 | High | None | On |
| Polar Client Secret | polar_client_secret | SOC2 | High | None | On |
| Polar Customer Session Token | polar_customer_session_token | SOC2 | High | None | On |
| Polar Personal Access Token | polar_personal_access_token | SOC2 | High | None | On |
| Polar Refresh Token | polar_refresh_token | SOC2 | High | None | On |
| Polar User Session Token | polar_user_session_token | SOC2 | High | None | On |
| Polymarket API Key | polymarket_api_key | SOC2 | High | None | On |
| PostHog Personal API Key | posthog_personal_api_key | SOC2 | High | None | On |
| Postman API Key | postman_api_key | SOC2 | High | None | On |
| Prefect Cloud API Key | prefect_cloud_api_key | SOC2 | High | None | On |
| Private key | private_key | SOC2 | Critical | None | On |
| Pulumi Access Token | pulumi_access_token | SOC2 | High | None | On |
| PyPI upload token | pypi_token | SOC2 | Critical | None | On |
| Ramp Business OAuth Token | ramp_business_oauth_token | SOC2 | High | None | On |
| Ramp Client Secret | ramp_client_secret | SOC2 | High | None | On |
| Ramp User OAuth Token | ramp_user_oauth_token | SOC2 | High | None | On |
| RapidAPI API Key | rapidapi_api_key | SOC2 | High | None | On |
| Replicate API Token | replicate_api_token | SOC2 | High | None | On |
| RubyGems API Key | rubygems_api_key | SOC2 | High | None | On |
| Salesforce Access Token | salesforce_access_token | SOC2 | High | None | On |
| Salesforce JWT Access Token | salesforce_jwt_access_token | SOC2 | High | None | On |
| Salesforce OAuth2 Consumer Key | salesforce_oauth2_consumer_key | SOC2 | High | None | On |
| Salesforce OAuth2 Consumer Secret | salesforce_oauth2_consumer_secret | SOC2 | High | None | On |
| Scaleway Secret Key | scaleway_secret_key | SOC2 | High | None | On |
| SendGrid API key | sendgrid_api_key | SOC2 | Critical | None | On |
| Sendinblue API Token | sendinblue_api_token | SOC2 | High | None | On |
| Sendinblue MCP API Token | sendinblue_mcp_api_token | SOC2 | High | None | On |
| Sentry Organization Token | sentry_organization_token | SOC2 | High | None | On |
| Sentry Personal Token | sentry_personal_token | SOC2 | High | None | On |
| Shippo API Key | shippo_api_key | SOC2 | High | None | On |
| Shippo JWT | shippo_jwt | SOC2 | High | None | On |
| Shopify access token | shopify_token | SOC2 | Critical | None | On |
| Shopify CLI Token | shopify_cli_token | SOC2 | High | None | On |
| Shopify Partner API Token | shopify_partner_api_token | SOC2 | High | None | On |
| Slack token | slack_token | SOC2 | Critical | None | On |
| Slack webhook URL | slack_webhook | SOC2 | High | None | On |
| Snowflake Personal Access Token | snowflake_personal_access_token | SOC2 | High | None | On |
| Snyk API Token | snyk_api_token | SOC2 | High | None | On |
| Sonar API Token | sonar_api_token | SOC2 | High | None | On |
| Square Access Token | square_access_token | SOC2 | High | None | On |
| Square OAuth Secret | square_oauth_secret | SOC2 | High | None | On |
| Square Personal Access Token | square_personal_access_token | SOC2 | High | None | On |
| Squarespace Access Token | squarespace_access_token | SOC2 | High | None | On |
| SSH Key | ssh_key | SOC2 | High | None | On |
| Stability AI API Key | stability_ai_api_key | SOC2 | High | None | On |
| Stripe secret key | stripe_secret_key | SOC2 | Critical | None | On |
| Stripe Webhook Signing Secret | stripe_webhook_signing_secret | SOC2 | High | None | On |
| Supabase Experimental Access Token | supabase_experimental_access_token | SOC2 | High | None | On |
| Supabase Legacy Service Key | supabase_legacy_service_key | SOC2 | High | None | On |
| Supabase OAuth Access Token | supabase_oauth_access_token | SOC2 | High | None | On |
| Supabase OAuth Client Secret | supabase_oauth_client_secret | SOC2 | High | None | On |
| Supabase Personal Access Token | supabase_personal_access_token | SOC2 | High | None | On |
| Supabase Secret Key | supabase_secret_key | SOC2 | High | None | On |
| Tableau Personal Access Token | tableau_personal_access_token | SOC2 | High | None | On |
| Telegram Bot Token | telegram_bot_token | SOC2 | High | None | On |
| Tencent Cloud Secret ID | tencent_cloud_secret_id | SOC2 | High | None | On |
| Tencent Cloud Secret Key | tencent_cloud_secret_key | SOC2 | High | None | On |
| Tencent Cloud STS Session Token | tencent_cloud_sts_session_token | SOC2 | High | None | On |
| Terraform API Token | terraform_api_token | SOC2 | High | None | On |
| Travis CI Access Token | travis_ci_access_token | SOC2 | High | None | On |
| Twilio Access Token | twilio_access_token | SOC2 | High | None | On |
| Twilio Account String Identifier (SID) | twilio_account_string_identifier_sid | SOC2 | High | None | On |
| Twilio API key | twilio_api_key | SOC2 | Critical | None | On |
| Twilio API Secret | twilio_api_secret | SOC2 | High | None | On |
| Twilio Auth Token | twilio_auth_token | SOC2 | High | None | On |
| Twitch API Token | twitch_api_token | SOC2 | High | None | On |
| Twitter Access Token | twitter_access_token | SOC2 | High | None | On |
| Twitter API Key Secret | twitter_api_key_secret | SOC2 | High | None | On |
| Twitter Bearer Token | twitter_bearer_token | SOC2 | High | None | On |
| Twitter OAuth2 Access Token | twitter_oauth2_access_token | SOC2 | High | None | On |
| Twitter OAuth2 Refresh Token | twitter_oauth2_refresh_token | SOC2 | High | None | On |
| Typeform Personal Access Token | typeform_personal_access_token | SOC2 | High | None | On |
| UpCloud API Token | upcloud_api_token | SOC2 | High | None | On |
| Upstage API Key | upstage_api_key | SOC2 | High | None | On |
| Vercel AI Gateway API Key | vercel_ai_gateway_api_key | SOC2 | High | None | On |
| Vercel App Access Token | vercel_app_access_token | SOC2 | High | None | On |
| Vercel App Refresh Token | vercel_app_refresh_token | SOC2 | High | None | On |
| Vercel Integration Token | vercel_integration_token | SOC2 | High | None | On |
| Vercel Personal Access Token | vercel_personal_access_token | SOC2 | High | None | On |
| Vercel token (classic) | vercel_token | SOC2 | High | None | On |
| Wakatime API Key | wakatime_api_key | SOC2 | High | None | On |
| WeChat Pay API Key | wechat_pay_api_key | SOC2 | High | None | On |
| Weights & Biases API Key | weights_and_biases_api_key | SOC2 | High | None | On |
| WorkOS API Key | workos_api_key | SOC2 | High | None | On |
| xAI (Grok) API Key | xai_grok_api_key | SOC2 | High | None | On |
| Yandex Cloud API Key | yandex_cloud_api_key | SOC2 | High | None | On |
| Yandex Cloud IAM Access Secret | yandex_cloud_iam_access_secret | SOC2 | High | None | On |
| Yandex Cloud IAM Cookie | yandex_cloud_iam_cookie | SOC2 | High | None | On |
| Yandex Cloud IAM Token | yandex_cloud_iam_token | SOC2 | High | None | On |
| Yandex Cloud SmartCaptcha Server Key | yandex_cloud_smartcaptcha_server_key | SOC2 | High | None | On |
| Yandex Legacy Dictionary API Key | yandex_legacy_dictionary_api_key | SOC2 | High | None | On |
| Yandex Legacy Predictor API Key | yandex_legacy_predictor_api_key | SOC2 | High | None | On |
| Yandex Legacy Translate API Key | yandex_legacy_translate_api_key | SOC2 | High | None | On |
| Yandex Passport OAuth Token | yandex_passport_oauth_token | SOC2 | High | None | On |
| Zai API Key | zai_api_key | SOC2 | High | None | On |
Network & Device
4 rules.
| Rule | ID | Compliance | Severity | Validation | Default |
|---|---|---|---|---|---|
| IPv4 address | ipv4_address | GDPR | Low | None | Off |
| IPv6 address | ipv6_address | GDPR | Low | None | Off |
| MAC address | mac_address | GDPR | Low | None | Off |
| URL | url | GDPR | Low | None | Off |