
CloakPipe
Privacy proxy for LLM & RAG. PII → consistent pseudonyms.
What it does
CloakPipe: Rust privacy proxy for LLM & RAG. Your data never reaches the LLM. Detects PII in <5ms, replaces with consistent pseudonyms (CloakTree), forwards sanitized request, rehydrates response instantly (SSE works). Single Rust binary. <5ms overhead. AES-256 vault (BYOK). No raw PII stored. Install: cargo install cloakpipe-cli && cloakpipe init && cloakpipe start MIT open source. Free self-host. GitHub: https://github.com/rohansx/cloakpipe Site: https://cloakpipe.co
Does a similar job
all alternatives →- AMA MitM proxy to see what your LLM tools are sendingJan 2026 · github.com · ▲218
I built this out of curiosity about what Claude Code was actually sending to the API. Turns out, watching your tokens tick up in real-time is oddly satisfying. Sherlock sits between your LLM tools and the API, showing you every request with a live dashboard, and auto-saved copies of every prompt as markdown and json.
- LPLocal Privacy Firewall-blocks PII and secrets before ChatGPT sees themDec 2025 · github.com · ▲111
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
- CRCovert – Rewrite of HashiCorp Vault Using Rust, SQLite and Litestream2023 · github.com · ▲54
- ALA local-first, reversible PII scrubber for AI workflowsDec 2025 · medium.com · ▲38
Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js/Bun. Here…
- PSPII-Shield – Log Sanitization Sidecar with JSON Integrity (Go, Entropy)Feb 2026 · github.com · ▲20
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
- RRRegolith – Regex library that prevents ReDoS CVEs in TypeScript2025 · github.com · ▲27
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
More dev tools this month
the category →



OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com

Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com

Launched alongside, March 2026
the whole month →

Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com


