High‑Trust. Secure by Default. Zero Config.

Sanitize Terminal Output.
Securely Share.

cleansh is a powerful, single‑purpose CLI tool that intelligently redacts IP addresses, emails, tokens, and absolute paths from your logs and terminal output.
Built in Rust, it's fully local, open‑source, and privacy‑first. Currently in active development (v0.1.2). We value your feedback—please report any issues.

Get cleansh Now Try Live Demo

Experience Real‑Time Log Redaction

Paste your logs below and see cleansh instantly redact sensitive information. No data leaves your browser.

Your Original Log:

Redacted Output:

Note: This is a client-sided demo. For production-grade redaction, use the CLI tool for full capabilities and performance. (Live `cleansh` integration via WASM or API coming soon!)

Join the Growing `cleansh` Community

cleansh is quickly gaining traction among developers who prioritize security and efficiency. See our adoption on crates.io:

Downloads (crates.io)

Why Choose `cleansh`? Secure, Comprehensive, Flexible.

🛡 Secure by Default

All redaction logic is static and regex‑based, preventing arbitrary code execution. cleansh runs entirely locally—no external network calls or telemetry. Your sensitive data stays private.

✂️ Comprehensive Built‑in Redactions

Supports detection of sensitive data like emails, IPv4 addresses, tokens, JWTs, SSH/AWS/GCP keys, hex secrets, and absolute paths out-of-the-box.

⚙️ Flexible Custom YAML Rules

Extend cleansh with your own regex rules via YAML, merging intelligently with defaults to suit industry- or project-specific requirements.

📋 Clipboard Integration (`-c`)

Use the `--clipboard` or `-c` flag to automatically copy sanitized output to your system clipboard—ready to paste.

📂 Versatile I/O (`-o`)

Supports stdin (piped) and file input, and outputs to stdout, clipboard, or a specified file using `--out` or `-o`.

✨ Clear Diff View (`-d`)

Use the `--diff` or `-d` flag to display a colored diff between original and sanitized output, highlighting changes.

Who Needs `cleansh`? Common Scenarios.

Whether you're debugging, collaborating, or ensuring compliance, cleansh simplifies secure log sharing.

Debugging & Support

Share logs safely with teammates or support without exposing API keys or user data.

Compliance & Auditing

Redact PII or regulated data automatically to comply with GDPR, CCPA, HIPAA, or internal policies.

CI/CD Pipelines

Integrate cleansh into your CI/CD workflows to sanitize logs before storage or sharing.

Open‑Source Contributions

Use cleansh to redact sensitive info from issue descriptions, code snippets, and public discussions.

Future‑Proofing cleansh: Our Roadmap

As cleansh evolves beyond v0.1.2, we plan to expand its integration and redaction capabilities.

🔌 Plugin System (Coming Soon)

Support a modular plugin architecture to enable community and industry-specific redaction logic extensions.

🌐 WebAssembly & Integrated Solutions (Coming Soon)

Developing WASM version for browser-based redaction, VS Code extension, and lightweight GUIs.

📦 Git Hooks (Coming Soon)

Implement Git pre-commit or post-merge hooks to sanitize logs or commit messages automatically.

🔒 Advanced Redaction Tiers (Coming Soon)

Plan support for cloud-specific tokens, dynamic secrets, and enterprise-grade redaction levels.

Explore Full Roadmap on GitHub

Get Started with cleansh Today

Installing cleansh is quick and easy. For full instructions, see our GitHub docs.

Install via Script (macOS / Linux)

curl -sSf https://github.com/KarmaYama/cleansh/releases/latest/download/cleansh-installer.sh | sh

Downloads the latest pre‑compiled binary. Recommended for most users.

Install via Cargo (Rust)

cargo install cleansh

Builds directly using Cargo from crates.io.

Alternatively, download binaries for Windows, macOS, or Linux from releases, or build from source.

Try the Live Demo

Sanitize Terminal Output. Securely Share.