← Back
tsymbaluyk

tsymbaluyk/maskgate

Mask Gate — PII masking shield: detect and mask passports, INN, SNILS, cards and other sensitive data before sending to ChatGPT, Claude, Gemini. block / redact / flag, reversible vault, self-hosted, 152-FZ.

View on GitHub ↗
Stars
249
Forks
0
Watchers
249
Open issues
0
Contributors
1
Language
—
License
—
Default branch
main
Created Sep 9, 2026Updated Sep 9, 2026

Star growth

Today—
This week—
This month—

Star history will appear here once this repo has been tracked for a couple of days.

README

🔒 Mask Gate

Маскировщик персональных данных для нейросетей · PII masking shield for AI

🌐 Website · 🛡 Security · ✈️ Telegram

⚠️ This repository is a landing page only. The source code is proprietary and is not published here. Загляните на сайт, чтобы попробовать: maskgate.ru

What is Mask Gate

Mask Gate detects sensitive data — passports, tax IDs (ИНН), SNILS, bank cards, phone numbers, emails, medical data, API keys — in text and files, and masks it before it reaches ChatGPT, Claude, Gemini and other LLMs.

Employees paste contracts, resumes and customer databases into chatbots every day. Mask Gate stops that data from leaking out — in milliseconds, without deploying a full DLP system.

Key features

  • 3 strategies — block (stop transfer), redact (irreversibly remove), flag (mark only)
  • Reversible vault — masked values are encrypted with AES-256-GCM and restored by token
  • Anti-bypass normalization — catches data hidden by homoglyphs, zero-width chars, base64 / percent / hex encoding, or split across messages
  • Files + OCR — txt, csv, docx, xlsx, pdf, plus scanned images
  • LLM chokepoint — server-side filter between you and any OpenAI-compatible API; supports BYOK (your own key)
  • Office add-in — mask and restore data right in Excel / Word
  • Servers in Russia — 152-FZ localization, no cross-border transfer
  • API — /analyze, /process, /process-file, /proxy/chat

Measured on our own eval corpus: recall ~95%, precision ~92%.

What it detects

Group Categories
Secrets & keys API key, private key, SSH key
Payments card number, CVV, expiry, account, BIK
Documents (RF) passport, INN, SNILS, OGRN, KPP
Contacts phone, email, address
Personal full name, date of birth
Medical health data
Other IP address, vehicle plate, credentials, money amounts

Plus your own custom markers and regex rules.

How it works

  1. Paste text or upload a file.
  2. Mask Gate finds sensitive data (regex + NER + checksums).
  3. It blocks, removes, masks or flags it — according to your policy.
было стало пример антиобхода Пример маскировки

Security & 152-FZ

  • Raw text is processed in memory and is never written to disk in plaintext — the audit log stores HMAC tokens only.
  • Masked values live in an AES-256-GCM vault.
  • Self-hosted deployment keeps data inside your perimeter.
  • Details: maskgate.ru/security

Try it

First check is free, no registration: maskgate.ru

Mask Gate — маскировщик персональных данных: находит в текстах и файлах паспорта, ИНН, СНИЛС, карты, телефоны, медданные и секреты и маскирует их перед отправкой в ChatGPT, Claude, Gemini и другие нейросети.

Три режима — block / redact / flag — и обратимый vault (AES-256-GCM). Ловит обходы: гомоглифы, zero-width, base64, данные, разбитые по сообщениям. Файлы + OCR, серверный chokepoint для LLM (BYOK), надстройка Excel/Word, серверы в РФ. Качество на собственном eval-корпусе: recall ~95%, precision ~92%.

Первая проверка бесплатна: maskgate.ru · Telegram: t.me/maskgateru

© 2026 Mask Gate. All rights reserved. This repository is a landing page; the source code is proprietary.