Redacto for Visual Studio

Anonymize code, logs and error messages on this device before you paste them into an AI chat, and turn the AI's reply back into your original values.

Requires Visual Studio 2022 (17.x) or newer (up to 18.x), on amd64 or arm64, and the Microsoft Edge WebView2 Runtime, which shows the panel. It works on its own: there is no browser extension to install.

Use

Open the panel from View → Other Windows → Redacto. Select code in an editor, text in the Output or Command window, or rows in the Error List, right-click → Anonymize with Redacto, or press Ctrl+Shift+Alt+A in any window (Locals, Watch, Find Results, ...). You can also type or paste text into the panel yourself.

The panel shows the original next to the anonymized text and saves it to History, where an AI reply can be turned back into the original values. Your code is never changed.

Source code and documentation: https://github.com/HunKonTech/Redacto (docs/developer/ide-plugins.md).

How it works

• Select code (or text in a console, terminal, Output window or error list), right-click → Anonymize with Redacto. The Redacto panel shows the original next to the anonymized text.
• Detects regex/checksum-backed personal data such as email addresses, phone numbers, credit cards, IBANs, IP addresses and dates, and secrets in source code: API keys and tokens from common providers, private key blocks, credentials assigned in code and configuration files, the user, password and host of connection strings, internal hostnames and account names in home-directory paths.
• Local AI adds a transformer NER model for names, addresses, identifiers and other free-text personal data. Detection, rules and model alike, runs on this device; nothing you select leaves it, and there is no telemetry.
• Rename code identifiers (on by default in the IDEs) renames the classes, methods and variables your code declares consistently (alma → var3), while leaving the language's and the well-known libraries' own names alone. Names in which Local AI finds personal data are replaced whole by a placeholder such as PERSON_1.
• Replacements are stable placeholders ([EMAIL_1], [PERSON_1]) or aliases. The map is saved to History; paste an AI reply into History & restore and the original values come back, ready to copy.
• Your code and your selection are never changed.
• The Settings tab holds the language, Local AI, code blocks, sensitivity, allow/blocklist and identity vault settings.

Local AI model

The plugin does not contain the Local AI model. When the Redacto panel first opens, it downloads the model once (about 170 MB) from Redacto's Hugging Face repository, checks every file against its SHA-256 and shows the progress in the panel and in the IDE. Only model files are downloaded. Until the model is there, and whenever Local AI is switched off, detection uses the pattern rules only, which cover a narrower set of categories.

Code languages

Rename code identifiers detects the language of each code block, locally and offline, so it knows which names are the language's and its libraries' own (keywords, built-ins, standard library) and leaves those alone. It recognizes these 50 languages:

JavaScript/TypeScript, Python, C#, Java, Kotlin, Go, PHP and Ruby also have their full standard-library names. It also recognizes jQuery, React, Lodash, Node.js, Express, Angular, Vue, RxJS, NumPy, pandas, requests, Django, ASP.NET Core, Entity Framework Core, LINQ, Spring and JUnit (with Mockito and AssertJ) from how the code uses them. Code in another language is still renamed, just without that language's own names, which errs on the side of renaming more.

Known limitations

Status — public beta (0.x). Detection is assistive: it helps you catch personal data before it leaves your machine, but it will not catch everything and is not a compliance or DLP product.

• Detection can miss sensitive content and can flag harmless text.
• Short names, ambiguous words, tables and unusual formatting reduce detection quality.
• Local AI can be slow or unavailable depending on the device's memory; pattern-only detection covers a narrower set of categories.
• Restoring placeholders in an AI reply depends on the local History and may not handle every rewrite.

Documentation

• Privacy posture
• Terms of Use
• Security reporting
• Support
• Changelog
• IDE plugins (developer guide)
• Impressum / Legal notice

Fork and license

Redacto is an independent, non-commercial fork of Privacy Guardrail by the German Research Center for Artificial Intelligence (DFKI); it is not affiliated with or endorsed by DFKI. It is maintained by Benedek Koncsik and licensed under the Apache License, Version 2.0. See NOTICE, FORK.md and THIRD_PARTY_NOTICES.md.

Redacto is free. If it is useful to you, you can support its development through GitHub Sponsors.