Policies

Redactum includes 197 built-in patterns across 28 categories for comprehensive detection of personal, financial, and technical sensitive data.

From API keys and database credentials to personal information and financial data, each policy is designed to catch real-world patterns while minimizing false positives. Use them individually or combine categories to match your security requirements.

Developer Identifiers

Policy	Example Match
`GOOGLE_CLOUD_PROJECT_ID`	`gcp-project-id: my-project-123456`
`KAFKA_BOOTSTRAP_SERVER`	`kafka-broker1.example.com:9092`
`CONTAINER_REGISTRY`	`us.gcr.io/my-project/my-image:latest`
`GIT_SSH_URL`	`git@github.com:user/repo.git`
`API_ENDPOINT_URL`	`https://api.example.com/v1/users`
`KUBERNETES_SECRET`	`kubernetes-secret: my-secret.default`
`BUILD_NUMBER`	`BUILD-2024.1.123`
`VERSION_TAG`	`v1.2.3`
`COMMIT_HASH`	`commit: a1b2c3d4e5f6789012345678901234567890abcd`
`PR_ISSUE_NUMBER`	`PR #1234`
`JIRA_TICKET`	`PROJ-1234`
`FIREBASE_CONFIG`	`my-app-default-rtdb.us-central1.firebaseio.com`
`SUPABASE_URL`	`https://abcdefghijklmnopqrst.supabase.co`
`AUTH0_DOMAIN`	`myapp.auth0.com`
`NETLIFY_SITE_ID`	`12345678-1234-1234-1234-123456789012`
`VERCEL_DEPLOYMENT_URL`	`https://my-app-git-main-myteam.vercel.app`

Developer Secrets

Policy	Example Match
`BASE64_URL_PARAM`	`https://example.com?token=aGVsbG93b3JsZHNlY3JldGtleXZhbHVl`
`DOCKER_PASSWORD_FLAG`	`docker login -u user -p mysecretpass123`
`ENVIRONMENT_VARIABLE_SECRET`	`export API_KEY=sk-1234567890abcdef`
`SERVICE_ACCOUNT_EMAIL`	`service-account@my-project.iam.gserviceaccount.com`
`SONARQUBE_TOKEN`	`sqp_1234567890abcdef1234567890abcdef12345678`
`LAUNCHDARKLY_SDK_KEY`	`sdk-12345678-1234-1234-1234-123456789012`
`SEGMENT_WRITE_KEY`	`segment-writekey: 1234567890abcdefghijklmnop123456`
`MIXPANEL_API_SECRET`	`mixpanel-secret: 1234567890abcdef1234567890abcdef`
`ALGOLIA_API_KEY`	`algolia-api-key: 1234567890abcdef1234567890abcdef`
`ELASTIC_CLOUD_ID`	`elastic-cloud-id: dXMtZWFzdC0xLmF3cy5mb3VuZC5pbyRjZWM2ZjI2MWE3NGJmMjRjZTMzYmI4ODExYjg0Mjk0ZiRjNmMyY2E2ZDA0MjI0OWFmMGNjN2Q3YTllOTYyNTc0Mw==`

Database Credentials

Policy	Example Match
`DATABASE_URL`	`postgres://user:pass@host:5432/dbname`
`MONGODB_CONNECTION_STRING`	`mongodb://user:pass@host:27017/database`
`REDIS_CONNECTION_STRING`	`redis://user:password@localhost:6379/0`
`ELASTICSEARCH_URL`	`https://elastic:password@localhost:9200`
`RABBITMQ_CONNECTION_STRING`	`amqp://user:password@localhost:5672/`
`POSTGRESQL_CONNECTION_STRING`	`postgresql://user:password@localhost:5432/dbname`
`MYSQL_CONNECTION_STRING`	`mysql://user:password@localhost:3306/database`
`CASSANDRA_CONNECTION_STRING`	`cassandra://user:pass@host:9042/keyspace`
`JDBC_CONNECTION_STRING`	`jdbc:mysql://dbuser:dbpass@localhost:3306/mydb`
`SMTP_CONNECTION_STRING`	`smtp://user:password@smtp.gmail.com:587`

Cloud Credentials

Policy	Example Match
`AZURE_SUBSCRIPTION_ID`	`12345678-1234-1234-1234-123456789012`
`HEROKU_API_KEY`	`12345678-1234-1234-1234-123456789012`
`DIGITALOCEAN_TOKEN`	`dop_v1_1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef`
`RAILWAY_TOKEN`	`12345678-1234-1234-1234-123456789012`
`GCP_SERVICE_ACCOUNT_KEY`	`my-service-account@my-project.iam.gserviceaccount.com`
`AWS_ACCOUNT_ID`	`aws-account-id: 123456789012`
`GCP_API_KEY`	`AIzaSyDdI0hCZtE6vySjMm-WEfRq3CPzqKqqsHI`
`AZURE_STORAGE_CONNECTION_STRING`	`DefaultEndpointsProtocol=https;AccountName=myaccount;AccountKey=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUV==;EndpointSuffix=core.windows.net`

API Keys

Policy	Example Match
`OPENAI_API_KEY`	`sk-1234567890abcdefghijklmnopqrstuvwxyz`
`ANTHROPIC_API_KEY`	`sk-ant-api03-abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ123456789012345678901234567890`
`GITHUB_TOKEN`	`ghp_abcdefghijklmnopqrstuvwxyz1234567890`
`GITHUB_FINE_GRAINED_TOKEN`	`github_pat_1234567890ABCDEFGHIJ_1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXY`
`STRIPE_KEY`	`sk_live_1234567890abcdefghijklmnop`
`JWT_TOKEN`	`eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c`
`API_KEY_GENERIC`	`api_key: 1234567890abcdefghij`
`PASSWORD_ASSIGNMENT`	`password = "P@ssw0rd123!"`
`GOOGLE_API_KEY`	`AIzaSyDdI0hCZtE6vySjMm-WEfRq3CPzqKqqsHI`
`SLACK_TOKEN`	`xoxb-123456789012-123456789012-abcdefghijklmnopqrstuvwx`
`PAYPAL_CLIENT_ID`	`AQkquBDf1zctJOWGKWUEtKXm6qVhueUEMvXO_-MCI4DQQ4-LWvkDLIN2fGsdabcdefghijklmnopqrstu`
`TWILIO_API_KEY`	`SK1234567890abcdef1234567890abcdef`
`SENDGRID_API_KEY`	`SG.abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ1234`
`CLOUDFLARE_API_TOKEN`	`1234567890abcdefghijklmnopqrstuvwxyz1234`

AWS Credentials

Policy	Example Match
`AWS_ACCESS_KEY`	`AKIAIOSFODNN7EXAMPLE`
`AWS_SECRET_KEY`	`wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY`
`AWS_SESSION_TOKEN`	`FQoGZXIvYXdzEBYaDKJHabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwx`

Private Keys

Policy	Example Match
`RSA_PRIVATE_KEY`	`-----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEA... -----END RSA PRIVATE KEY-----`
`EC_PRIVATE_KEY`	`-----BEGIN EC PRIVATE KEY----- MHcCAQEEIA... -----END EC PRIVATE KEY-----`
`OPENSSH_PRIVATE_KEY`	`-----BEGIN OPENSSH PRIVATE KEY----- b3BlbnNzaC1rZXktdjEA... -----END OPENSSH PRIVATE KEY-----`
`GENERIC_PRIVATE_KEY`	`-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQ... -----END PRIVATE KEY-----`

CI/CD Secrets

Policy	Example Match
`JENKINS_TOKEN`	`jenkins-token: 11a1234567890abcdef1234567890abcd`
`CIRCLECI_TOKEN`	`circleci-token: 1234567890abcdef1234567890abcdef12345678`
`TRAVIS_CI_TOKEN`	`travis-token: 1234567890abcdefghijkl`
`GITLAB_TOKEN`	`glpat-abcdefghijklmnopqrst`
`GITLAB_CI_TOKEN`	`CI_JOB_TOKEN: 1234567890abcdef`
`AZURE_DEVOPS_TOKEN`	`azdo-token: 1234567890abcdefghijklmnopqrstuvwxyz1234567890abcdef`
`BITBUCKET_TOKEN`	`bitbucket-token: 1234567890abcdefghij`

Monitoring Secrets

Policy	Example Match
`SENTRY_DSN`	`https://1234567890abcdef1234567890abcdef@1a2b3c.ingest.sentry.io/1234567`
`NEW_RELIC_LICENSE_KEY`	`newrelic-key: 1234567890abcdef1234567890abcdef12345678`
`DATADOG_API_KEY`	`datadog-key: 1234567890abcdef1234567890abcdef`
`PAGERDUTY_INTEGRATION_KEY`	`pagerduty-key: 1234567890abcdef1234567890abcdef`
`GRAFANA_API_KEY`	`glsa_1234567890abcdefghijklmnopqrstuv_1a2b3c4d`
`PROMETHEUS_REMOTE_WRITE`	`remote_write_url: https://prometheus-us-central1.grafana.net/api/v1/write`
`SPLUNK_HEC_TOKEN`	`Splunk 12345678-1234-1234-1234-123456789012`
`SUMO_LOGIC_COLLECTOR`	`https://collectors.us2.sumologic.com/receiver/v1/http/1234567890ABCDEF`
`BUGSNAG_API_KEY`	`bugsnag-api-key: 1234567890abcdef1234567890abcdef`
`ROLLBAR_ACCESS_TOKEN`	`rollbar-access-token: 1234567890abcdef1234567890abcdef`
`AIRBRAKE_API_KEY`	`airbrake-api-key: 1234567890abcdef1234567890abcdef`
`LOGDNA_INGESTION_KEY`	`logdna-ingestion-key: 1234567890abcdef1234567890abcdef`
`LOGGLY_TOKEN`	`loggly-token: 12345678-1234-1234-1234-123456789012`
`PAPERTRAIL_TOKEN`	`papertrail-token: 1234567890abcdef1234567890abcdef`

Authentication Secrets

Policy	Example Match
`OAUTH_CLIENT_ID`	`client_id: 1234567890-abcdefghijklmnopqrstuvwxyz`
`OAUTH_CLIENT_SECRET`	`client_secret: GOCSPX-1234567890abcdefghijklmnop`
`OAUTH_REFRESH_TOKEN`	`refresh_token: 1//0gFU7abcdefghijklmnopqrstuvw`
`OAUTH_ACCESS_TOKEN`	`access_token: ya29.a0ARrdaMabcdefghijklmnopqr`
`BASIC_AUTH_HEADER`	`Authorization: Basic dXNlcjpwYXNzd29yZA==`
`BEARER_TOKEN_HEADER`	`Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N_XgL0n3I9PlFUP0THsR8U`
`API_KEY_HEADER`	`X-API-Key: 1234567890abcdefghijklmnopqrst`
`SESSION_ID_COOKIE`	`sessionid=a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0`
`OKTA_API_TOKEN`	`okta-token: 001234567890aBcDeFgHiJkLmNoPqRsTuVwXyZ12`
`AUTH0_API_TOKEN`	`auth0-token: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Ik`
`KEYCLOAK_CLIENT_SECRET`	`keycloak-client-secret: 12345678-1234-1234-1234-123456789012`

Webhook URLs

Policy	Example Match
`WEBHOOK_URL`	`https://hooks.example.com/webhook/1234567890abcdef`
`SLACK_WEBHOOK`	`https://hooks.slack.com/services/T12345678/B1234567890/abcdefghijklmnopqrstuvwx`
`DISCORD_WEBHOOK`	`https://discord.com/api/webhooks/123456789012345678/abcdefghijklmnopqrstuvwxyz1234567890abcdefghijklmnopqrstuvwxyz123456`

Package Registries

Policy	Example Match
`NPM_TOKEN`	`npm_abcd1234efgh5678ijkl9012mnop3456qrst`
`PYPI_TOKEN`	`pypi-abcd1234efgh5678ijkl9012mnop3456qrstuvwx7890yzab1234cdef567`
`QUAY_IO_TOKEN`	`quay.io-token: 1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ123456`
`JFROG_ARTIFACTORY_TOKEN`	`AKCp1234567890abcdefghijklmnopqrstuvwxyz`
`NEXUS_REPOSITORY_TOKEN`	`nexus-token: 1234567890abcdef-1234-1234-1234`

Container Registries

Policy	Example Match
`DOCKER_REGISTRY_TOKEN`	`dckr_pat_abcd1234efgh5678ijkl9012mnop3456qrst`
`DOCKER_HUB_TOKEN`	`dckr_pat_abcd1234efgh5678ijkl9012mnop3456qrst`

Infrastructure Secrets

Policy	Example Match
`TERRAFORM_CLOUD_TOKEN`	`12345678901234.atlasv1.123456789012345678901234567890123456789012345678901234`
`HASHICORP_VAULT_TOKEN`	`vault-token: s.1234567890abcdefghijklmnop`
`AWS_SECRETS_MANAGER_ARN`	`arn:aws:secretsmanager:us-east-1:123456789012:secret:MySecret-abcdef`
`AZURE_KEY_VAULT_SECRET`	`https://myvault.vault.azure.net/secrets/MySecret/1234567890abcdef1234567890abcdef`
`GCP_SECRET_MANAGER`	`projects/123456/secrets/my-secret/versions/latest`
`KUBERNETES_CONFIG`	`apiVersion: v1 kind: Config`
`HELM_REPOSITORY_CREDENTIALS`	`helm-repo-password: 1234567890abcdef`
`ANSIBLE_VAULT_PASSWORD`	`ansible-vault-password-file: /path/to/vault-pass`
`CONSUL_TOKEN`	`consul-token: 12345678-1234-1234-1234-123456789012`
`RANCHER_TOKEN`	`token-12abc:12345`

Encryption Keys

Policy	Example Match
`SSH_KEY_FINGERPRINT`	`SHA256:1234567890abcdefghijklmnopqrstuvwxyz1234567`
`PGP_KEY_ID`	`0x1234567890ABCDEF`
`AGE_SECRET_KEY`	`AGE-SECRET-KEY-1QYQSZQGPQYQSZQGPQYQSZQGPQYQSZQGPQYQSZQGPQYQSZQGPQYQSZQGPQY`
`AGE_PUBLIC_KEY`	`age1abcdefghijklmnopqrstuvwxyz1234567890abcdefghijklmnopqrstuv`
`AWS_KMS_KEY_ID`	`arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012`
`GCP_KMS_KEY`	`projects/my-project/locations/us-central1/keyRings/my-keyring/cryptoKeys/my-key`
`AZURE_KEY_IDENTIFIER`	`https://myvault.vault.azure.net/keys/mykey/1234567890abcdef1234567890abcdef`
`MASTER_KEY`	`master_key: YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY3ODkwYWJjZGVmZ2g=`

Insurance

Policy	Example Match
`AUTO_INSURANCE_POLICY`	`Auto Policy: POLAUTO123`
`HOME_INSURANCE_POLICY`	`Home Policy: HOME2024789`
`LIFE_INSURANCE_POLICY`	`Life Policy: LIFEPOL456`
`TRAVEL_INSURANCE_POLICY`	`Travel Policy: TRV2024123`
`WORKERS_COMPENSATION_CLAIM`	`Workers Comp Claim: WC2024789`
`DISABILITY_INSURANCE_POLICY`	`Disability Policy: DISPOL123`
`DENTAL_INSURANCE_POLICY`	`Dental Policy: DENT456123`
`VISION_INSURANCE_POLICY`	`Vision Policy: VIS789456`
`US_HEALTH_INSURANCE_POLICY`	`Policy H123456789`
`US_INSURANCE_GROUP_NUMBER`	`GRP123456`
`US_INSURANCE_CLAIM_NUMBER`	`Claim CLM2024123456`
`MEDICARE_NUMBER_US`	`123-45-6789-A`
`MEDICAID_NUMBER_US`	`Medicaid 123456789A`
`BCBS_MEMBER_ID`	`BCBS XYZ123456789`
`AETNA_MEMBER_ID`	`Aetna W123456789`
`UNITEDHEALTH_MEMBER_ID`	`United 901234567`
`UK_NHS_NUMBER`	`123 456 7890`
`CANADIAN_HEALTH_CARD`	`1234567890`
`AUSTRALIAN_MEDICARE_NUMBER`	`1234 56789 0`
`GERMAN_HEALTH_INSURANCE_NUMBER`	`A123456789`
`FRENCH_SOCIAL_SECURITY_NUMBER`	`184127645108946`
`EUROPEAN_HEALTH_INSURANCE_CARD`	`EHIC 801234567890123`
`WORKERS_COMPENSATION_CLAIM`	`Workers Comp Claim: WC2024789`
`DISABILITY_INSURANCE_POLICY`	`Disability Policy: DISPOL123`
`DENTAL_INSURANCE_POLICY`	`Dental Policy: DENT456123`
`VISION_INSURANCE_POLICY`	`Vision Policy: VIS789456`

Medical

Policy	Example Match
`MEDICAL_RECORD_NUMBER`	`MRN-123456`
`HEALTH_INSURANCE_ID`	`Insurance HIB123456789`

Financial

Policy	Example Match
`CREDIT_CARD`	`4111111111111111`
`CREDIT_CARD_WITH_SEPARATORS`	`4111-1111-1111-1111`
`ROUTING_NUMBER_US`	`021000021`
`IBAN`	`GB82WEST12345698765432`
`SWIFT_CODE`	`BOFAUS3N`
`ACCOUNT_NUMBER_US`	`Account Number: 123456789012`
`ACH_ROUTING_NUMBER`	`Routing Number: 021000021`
`CREDIT_CARD_CVV`	`CVV: 123`

Tax Identifiers

Policy	Example Match
`US_EIN_WITH_LABEL`	`EIN: 12-3456789`
`US_EIN_PREFIXED`	`EIN 12-3456789`
`US_TIN_WITH_LABEL`	`TIN 12-3456789`
`US_EIN`	`12-3456789`
`UK_VAT_NUMBER`	`GB123456789`
`EU_VAT_NUMBER`	`DE123456789`
`CANADIAN_BUSINESS_NUMBER`	`123456789RC0001`
`AUSTRALIAN_ABN`	`12 345 678 901`
`GERMAN_TAX_NUMBER`	`12/345/67890`
`FRENCH_SIRET_NUMBER`	`12345678901234`
`FRENCH_SIREN_NUMBER`	`123456789`

Government IDs

Policy	Example Match
`US_DRIVER_LICENSE`	`D12345678`
`US_PASSPORT_NUMBER`	`M12345678`
`NATIONAL_ID`	`National ID: ID123456789`
`PASSPORT_MRZ`	`P<USADOE<<JOHN<<<<<<<<<<<<<<<<<<<<<<<<<<<<< L898902C<3USA6908061M9511084710000307<715816`
`ITIN`	`900-70-1234`

Policy	Example Match
`SSN`	`123-45-6789`

Email

Policy	Example Match
`EMAIL_ADDRESS`	`john@example.com`

Phone Numbers

Policy	Example Match
`PHONE_NUMBER_UK`	`+442071234567`
`PHONE_NUMBER_CANADIAN`	`+1-416-555-0123`
`PHONE_NUMBER_INTERNATIONAL`	`Call +14155551234`
`PHONE_NUMBER_US`	`555-123-4567`

Geographic

Policy	Example Match
`US_ZIP_CODE`	`12345`
`CANADIAN_POSTAL_CODE`	`K1A 0B1`
`UK_POSTCODE`	`SW1A 1AA`
`GPS_COORDINATES`	`40.7128,-74.0060`

Employee IDs

Policy	Example Match
`EMPLOYEE_ID`	`EMP 123456`

Vehicles

Policy	Example Match
`VIN`	`1HGBH41JXMN109186`
`US_LICENSE_PLATE`	`ABC-1234`

IP Addresses

Policy	Example Match
`IPV4_ADDRESS`	`192.168.1.1`
`IPV6_ADDRESS`	`2001:0db8:85a3:0000:0000:8a2e:0370:7334`

Digital Identity

Policy	Example Match
`UUID`	`550e8400-e29b-41d4-a716-446655440000`
`BITCOIN_ADDRESS`	`1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa`
`ETHEREUM_ADDRESS`	`0x742d35Cc6634C0532925a3b844Bc9e7595f5a123`
`MAC_ADDRESS`	`00:1B:44:11:3A:B7`
`SHA_HASH`	`2fd4e1c67a2d28fced849ee1bb76e7391b93eb12`

Policies ​

Developer Identifiers ​

Developer Secrets ​

Database Credentials ​

Cloud Credentials ​

API Keys ​

AWS Credentials ​

Private Keys ​

CI/CD Secrets ​

Monitoring Secrets ​

Authentication Secrets ​

Webhook URLs ​

Package Registries ​

Container Registries ​

Infrastructure Secrets ​

Encryption Keys ​

Insurance ​

Medical ​

Financial ​

Tax Identifiers ​

Government IDs ​

Social Security Numbers ​

Email ​

Phone Numbers ​

Geographic ​

Employee IDs ​

Vehicles ​

IP Addresses ​

Digital Identity ​