Skip to content
DocsGo to Dashboard
SSL/TLS & Data Shield

Turn on Data Shield to automatically scrub leaked API keys, private keys, tokens, database URIs, and origin error traces before responses reach visitors

Accidental exposure of sensitive customer information or internal passwords in website responses can lead to severe data breaches and regulatory fines under privacy laws like GDPR and PCI-DSS.

How Data Shield protects your business#

WebOptiva's Data Shield runs directly on our edge network. As HTML and JSON responses travel back from your web host toward the visitor, Data Shield scans the content in real time for accidental credential exposures.

What data does it scrub?#

  • Cloud Access Keys: AWS access key IDs are replaced with [REDACTED_AWS_KEY].
  • Private Keys: PEM-encoded RSA and other private keys are replaced with [REDACTED_PRIVATE_KEY].
  • Developer Tokens: GitHub tokens (ghp_…) and Slack tokens (xoxb-…) are replaced with [REDACTED_GITHUB_TOKEN] and [REDACTED_SLACK_TOKEN].
  • Database URIs: Connection strings for PostgreSQL, MySQL, and MongoDB are replaced with [REDACTED_DB_URI].
  • Origin Error Traces: Unhandled 5xx responses with PHP fatal errors, Node exceptions, Python tracebacks, Java stack traces, or SQL errors are replaced with a safe, branded WebOptiva error page.

Because this protection happens automatically at WebOptiva's edge, you don't have to install complex code on your server. If an accidental leak occurs, the data is sanitized before any visitor can see it, and an alert is recorded in your dashboard.

Back to SSL/TLS & Data Shield