KlaroShield
Strip PII out before it ever reaches a log file or a third-party API.
A lightweight edge proxy that detects and redacts credit cards, SSNs, emails, phone numbers and API keys/JWTs in requests and responses — no SDK, one base URL change.
What it detects
Credit cards
Luhn-validated, not just digit-run matching
SSNs
US format
Emails
Standard address patterns
Phone numbers
US formats, with/without country code
API keys & JWTs
OpenAI, Stripe, GitHub token shapes + generic JWTs
Why a proxy, not a library
🛡️
Sits in front of any upstream
Point your app at KlaroShield instead of the API directly — it forwards the request after redacting, so the upstream (and your own logs) never see raw PII.
🔒
Mask or reversible hash
Redact to a fixed placeholder, or an HMAC token you can look up later — your choice per use case.
⚡
No SDK to integrate
It's a proxy, not a library — change one base URL, nothing else in your app changes.
📈
Usage-metered plans
From a free 10,000 requests/month tier up to unlimited on Enterprise.
Free up to 10,000 requests/month
No credit card. Paid tiers start when you need more volume.
See all KlaroShield plans →