Security by Architecture,
not just Policy.
Your secrets never leave your machine.
The Redaction Boundary
Source Code + Secrets
Your full codebase with API keys, tokens, etc.
Local Redaction
Secrets masked before transmission
Logic Analysis
Ephemeral processing, stateless containers
Wiped
Memory cleared after every request
Security Pillars
Local-Only Secrets
Your API keys never leave your machine. Verify it in our Open Source CLI.
Secrets are detected and redacted locally before any data transmission.
Ephemeral Processing
Our analysis containers are stateless. Memory is wiped after every request.
No persistent storage. No logs of your code. Zero retention.
Encrypted Transport
TLS 1.3 in transit. Plaintext exists only inside the ephemeral analysis environment.
All client-to-Inkog traffic is encrypted in transit with TLS 1.3. The analysis service decrypts the sanitized payload inside an ephemeral, stateless container and discards it after the response.
Don't trust us. Verify it.
Our CLI is open source under Apache 2.0. Read the redaction logic yourself.
View on GitHubLast updated: December 2025