Network Config Anonymizer for AI Tools: Paste Safely, Troubleshoot Faster

Sysadmins use AI assistants — ChatGPT, Claude, Copilot — to debug routing issues, spot ACL mismatches, and trace down VPN misconfigurations. The workflow is fast and effective. The problem: network configs are full of credentials.

Passwords, SNMP community strings, BGP MD5 keys, IPsec pre-shared keys. Pasting a raw config into any external service is a security incident you don't want to explain to your CISO.

What's Actually in Your Config

A typical Cisco IOS running config contains more sensitive data than most people realize:

• enable secret hashes
• VTY line passwords
• SNMP community strings (read and read-write)
• BGP neighbor MD5 passwords
• OSPF area authentication keys
• IPsec pre-shared keys
• RADIUS and TACACS+ shared secrets
• IKEv2 PSKs and keys

None of these need to reach an AI server for troubleshooting to work. The AI needs the structure — interface names, subnets, routing policies, ACL logic. Not the secrets.

How ScrubForge Anonymizes Your Config

ScrubForge is a Chrome extension that runs entirely in your browser. Your config never leaves your machine.

Step 1: Export your running config
Pull the config from your device. On Cisco IOS: show running-config. On FortiGate: System → Configuration → Download.

Step 2: Open ScrubForge
Click the ScrubForge icon in your Chrome toolbar. It opens as a local panel — no upload, no external server.

Step 3: Paste and scrub
Paste your config into ScrubForge. It detects credential patterns and replaces each secret with a consistent placeholder token like SCRUBBED_SECRET_1.

Step 4: Copy and paste anywhere
Copy the sanitized config. Paste it into ChatGPT, Claude, a support ticket, Reddit — wherever you need help.

Why Consistent Tokens Matter

ScrubForge uses the same token everywhere the same secret appeared. If SCRUBBED_PSK_1 shows up in both the IKE proposal and the tunnel interface, the AI can still follow the relationship — it just can't recover the actual value.

This means AI assistants can still:

• Trace routing protocol neighbor relationships
• Spot asymmetric ACL rules
• Identify mismatched IKE phase parameters
• Flag missing or contradictory policy entries

They just can't accidentally log, store, or expose the actual credential values.

FAQ

Does ScrubForge send my config to any server?
No. ScrubForge runs entirely in your browser using local JavaScript. Your config never leaves your machine — not even to Wendygo Studio's servers.

Can the AI still help me troubleshoot if credentials are removed?
Yes. Network issues — routing loops, ACL mismatches, VPN phase mismatches, VLAN misconfiguration — are almost never caused by the credential values themselves. The structure of the config is what matters for debugging.

Which network device formats does ScrubForge support?
ScrubForge detects credential patterns in Cisco IOS/IOS-XE, FortiGate, Juniper JunOS, and generic text configs. Any file containing credential-like patterns (passwords, keys, secrets) gets sanitized.