Hi Product Hunt, I'm Safa.

AI is great at reading logs and scripts, but those files are full of passwords, internal IPs, server names and people's usernames. Cleaning them by hand is slow, and you lose track of which server was which. So I built Maskink.

It swaps sensitive values for consistent placeholders:

mysql -u app_user -p'S3cr3t!2024' -h db01.corp.local
mysql -u <USER_2> -p'<PASS_1>' -h <FQDN_1>

The same value always gets the same token, so the AI can still reason about what happened where. When the reply comes back, the tokens turn back into your real values.

Three things I focused on:

Small: PHP and MySQL. No Composer, no build step, no CDN. It runs without internet.
Easy to integrate: POST text to a JSON endpoint from any language and get the masked text plus the mapping. PHP apps can use the engine class directly.
A serious rule set: 95 built-in rules across 19 categories, covering network device configs, Windows and Linux logs, cloud tokens, PEM keys, plus checksum-validated cards, IBANs and Turkish IDs. Every rule can be edited, tested live or replaced with your own.

It also has a masked AI chat that works with Ollama, vLLM or any OpenAI-compatible endpoint, and it can cover sensitive text in screenshots using local OCR.

Masking is rule-based, so no rule set catches everything. Please review the output before sending anything sensitive.

Interactive Demo: https://spaksu.github.io/maskink

It's MIT licensed. I'd love your feedback: which log format or token should it catch that it doesn't today.