Free tool · No upload · No sign-up

Config Sanitizer

Strip the sensitive parts out of a config before it goes to TAC, a forum, a colleague — or an AI assistant. Passwords, keys and certificates are always redacted; IPs, MACs, serials, emails, usernames and your customer's names are replaced consistently, with a private mapping table so you can still decode the answers you get back. Everything runs in your browser — the whole point is that your config never leaves your machine.

Feedback
What to redact
Customer & site names

Replaced everywhere they appear (case-insensitive), including inside hostnames and object names.

Paste a config on the left (or load the sample) and hit Sanitize.
Related IPWOX tools: Firewall Policy Auditor · Config Compare · FortiGate Debug Flow Decoder — all free, all run in your browser. See all tools.