LogoLogo
Book a Demo
  • Introduction
  • Getting Started
    • Install
    • Configuration - General
    • Configuration - Code
    • Configuration - Dependencies
    • Configuration - Containers
    • Configuration - Secrets
    • Configuration - Attack Surface Monitoring
  • Features
    • Code Scanning
      • Custom Rules
      • Supported Languages
    • Dependency Scanning
      • Supported Package Managers
    • Secrets Scanning
      • Supported Secret Types
      • Confidential Information
    • Web App Penetration Testing
      • Quickstart
      • Supported Applications
      • Apps in Private Networks
      • Custom Rules
    • Orchestration
  • Integrations
    • GitHub
      • Repository Issue Dashboards
    • Bitbucket
      • Repository Dashboards
    • Slack
      • Install
    • Jira
      • Install
      • Configuration
      • Assignee
      • Priorities
      • Manual Ticket Creation
    • AWS
      • Prerequisites
      • Configuration
  • API Reference
    • Nullify API
      • Authentication
      • Pagination
      • Admin
      • Code Scanning (SAST)
      • Dependency Scanning (SCA)
      • Secrets Scanning
      • Dynamic Scanning (DAST)
  • Enterprise Tier
    • GitHub Install
    • Azure DevOps Install
  • More Info
    • About Us
    • Latest Updates
    • Security
    • Data Handling Policy
Powered by GitBook

© 2023 Nullify | All Rights Reserved.

On this page
  • Detectable Information Categories
  • How does it work?

Was this helpful?

  1. Features
  2. Secrets Scanning

Confidential Information

Nullify scans for confidential information across your codebase on every commit and pull request.

Detected confidential information will be flagged as a secrets finding in the Nullify dashboard.

Detectable Information Categories

Nullify can detect the following categories of Personally Identifiable Information in English:

Personal Information

  • Surnames

  • Email addresses

  • Phone numbers

  • Addresses

  • Date of birth

Financial Information

  • Credit card numbers

Location Information

  • Location data

How does it work?

Nullify scans for diffs in your codebase to detect the presence of confidential information.

For example, we create a sample SQL query (create.sql) that seeds a database with personal information (emails, credit card, names, etc.) and commit this to a repository:

Nullify will sample this diff, detect the presence of personal information, and flag it as a secrets finding, with the category of Personal Information:

Note: all data in screenshots is fictional and generated from Fake Name Generator.

When Nullify detects PII, a new finding will be created in the Nullify dashboard with the affected line of code highlighted.

This feature is currently in alpha testing and available upon request.

PreviousSupported Secret TypesNextWeb App Penetration Testing

Last updated 7 months ago

Was this helpful?

Sample SQL query
Example PII results