← klaro.services
KlaroShield

Strip PII out before it ever reaches a log file or a third-party API.

A lightweight edge proxy that detects and redacts credit cards, SSNs, emails, phone numbers and API keys/JWTs in requests and responses — no SDK, one base URL change.

Start free →See pricing
api.klaroshield.klaro.services/v1/proxy
REQUEST BODY (before)
{ "email": "sarah@acme.com",
"card": "4242 4242 4242 4242",
"note": "call 415-555-0192" }
FORWARDED TO UPSTREAM (after)
{ "email": "[REDACTED_EMAIL]",
"card": "[REDACTED_CREDIT_CARD]",
"note": "call [REDACTED_PHONE]" }
3 PII types redacted

What it detects

Credit cards
Luhn-validated, not just digit-run matching
SSNs
US format
Emails
Standard address patterns
Phone numbers
US formats, with/without country code
API keys & JWTs
OpenAI, Stripe, GitHub token shapes + generic JWTs

Why a proxy, not a library

🛡️
Sits in front of any upstream
Point your app at KlaroShield instead of the API directly — it forwards the request after redacting, so the upstream (and your own logs) never see raw PII.
🔒
Mask or reversible hash
Redact to a fixed placeholder, or an HMAC token you can look up later — your choice per use case.
No SDK to integrate
It's a proxy, not a library — change one base URL, nothing else in your app changes.
📈
Usage-metered plans
From a free 10,000 requests/month tier up to unlimited on Enterprise.
Free up to 10,000 requests/month
No credit card. Paid tiers start when you need more volume.
See all KlaroShield plans →