Keep secrets out of your run logs

Hook logs now automatically mask sensitive values before anything is written to your run history. Auth headers, tokens, passwords, and environment variable values (in production runs) are replaced with [redacted]. No configuration required.

Need to mask additional fields? Add custom redaction keys in Settings for simple names like email or dot-notation paths like customer.phone for precise control.

This is also the foundation for a future where AI agents can help debug your automations by reading your run logs—without ever being exposed to the secrets inside them.

Learn more →