# Rampart

7 Hacker News commenters recommended Rampart and 7 criticized it, November 2025 to November 2026. It was recommended in 4 of 13 months.

**Verdict:** Recommended for catching secrets in AI agent tool responses before the agent sees them, and for its publicly available source. Critics doubt it meets HIPAA de-identification and detection accuracy standards.

## Why people recommend it

- Catches secrets in tool responses (1 comments): "Rampart catches the secret in the tool response before the agent ever sees it." ([source](https://news.ycombinator.com/item?id=47329033))
- Source code publicly available (1 comments): "Good thing you don't need much trust in this case. Source available here" ([source](https://news.ycombinator.com/item?id=50033991))
- Commendable even if imperfect (1 comments): "This is commendable on its own, even if it’s not perfect." ([source](https://news.ycombinator.com/item?id=50034515))

## What people warn about

- Privacy practices and HIPAA compliance concerns (3 comments): "does this library, as described in the blog post, de-identify data sufficiently for HIPAA? then no, it doesn't appear that it does." ([source](https://news.ycombinator.com/item?id=50037912)) "violated long-standing security practices and copied a social security database into an insecure AWS instance" ([source](https://news.ycombinator.com/item?id=50037977)) "the example on the page shows a person sharing their SNN with a chatbot to help them find an apartment" ([source](https://news.ycombinator.com/item?id=50034115))
- Detection accuracy and coverage gaps (3 comments): "Regex over arbitrary string literals does not represent determinism in this context." ([source](https://news.ycombinator.com/item?id=50034124)) "The response scanning gap I'd probe first: base64-encoded or chunk-split secrets." ([source](https://news.ycombinator.com/item?id=47330438)) "98.4% is nowhere near good enough to call it PII redaction." ([source](https://news.ycombinator.com/item?id=50034145))

## Alternatives hackers recommend

- [OpenAI Privacy Filter](https://hackerapproved.com/p/openai-privacy-filter.md): 7 recommend
- [Microsoft Presidio](https://hackerapproved.com/p/microsoft-presidio.md): 5 recommend
- [PII-Shield](https://hackerapproved.com/p/pii-shield.md): 5 recommend

## Cite as

Hacker Approved, "Rampart", https://hackerapproved.com/p/rampart/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).
