How to Use ScrubBeforeAI
A simple, secure, 3-step workflow to protect your private keys, database passwords, and customer PII from AI training sets.
Scrub Your Sensitive Input
Paste your log file, configuration block, or prompt into the Redactor workspace. Enable/disable individual detectors from the sidebar as needed, and click Redact Text.
Prompt the AI Safely
Copy the redacted text output from ScrubBeforeAI and paste it safely into ChatGPT, Claude, Gemini, or any external LLM workspace. The AI will debug and formulate response scripts using the non-sensitive placeholder tokens.
Copy Redacted Output
Placeholder identifiers keep your actual secrets isolated. The LLM processes your context with zero credentials leaked to third-party databases.
Restore Secrets Locally
Once you get the output from the AI, copy the AI's response block and paste it into the Unredactor tab. Click Restore Text to instantly swap the placeholders back for the original credentials completely offline.
pg_dump postgres://admin:[SCRUB_DB_PASSWORD_1]@db.host.compg_dump postgres://admin:super-secret-password@db.host.com⚙️ Advanced Session Features
Visual Diff View
Toggle between the REDACTED text and the DIFF VIEW. The diff shows deleted secrets in red with strikethroughs side-by-side with replacement green placeholders, letting you easily verify exactly what was hidden.
Encrypted session maps
Click export_map to download your session mapping as an encrypted .smap file locked with a password (using AES-GCM 256-bit locally). Reload it later using import_map to restore AI outputs across clean sessions.
100% Offline PWA Mode
ScrubBeforeAI installs a local service worker during your first visit. You can access and run the entire tool (redactor, unredactor, file scanner, custom rules) completely offline, ideal for secure air-gapped workspaces.
All substitution maps are stored strictly inside your browser's sessionStorage and never transferred over any network. When you close the browser tab, the session map is destroyed instantly. We host no tracking engines, no databases, and zero analytical trackers.