
Data Masking
Redaction of sensitive data
Data Masking automatically detects and protects sensitive data in the telemetry stream before it is sent to external systems. The system uses more than 50 predefined patterns for PII, PCI DSS, HIPAA, and other regulations, with the ability to define custom rules using regex or ML-based detection. Transformation options include hashing, tokenization, redaction, and format-preserving encryption.
Enterprise-grade protection compliant with regulatory requirements and security standards
Fast deployment with minimal resource overhead
Dedicated support from a certified partner
Easy integration with your existing infrastructure
Key features
- More than 50 predefined patterns for SSN, credit cards, PESEL, NIP, and email addresses
- ML-based detection for unstructured sensitive data
- Format-preserving encryption preserving data structure for analysis purposes
- Selective masking allowing different transformations by route
- Audit logging of all masking operations for compliance
Business benefits
- Compliance with GDPR, PCI DSS, HIPAA, and other regulations immediately after deployment
- Eliminate the risk of sensitive data leakage to external systems
- Secure use of cloud SIEM without concerns about personal data
- Reduce PCI DSS audit scope through masking before transmission
- Preserve analytical usability with full privacy protection

Why Cribl?
A platform for routing, transforming, and managing telemetry data. Cribl enables organizations to regain control over their data – send the right logs to the right places, reduce SIEM costs, enrich data in motion, and eliminate vendor lock-in.
Need Data Masking in your organization?
As a certified Cribl partner, we'll help you deploy and configure the solution.