Reference

Detection categories

The built-in categories InputGuard can detect, plus custom patterns for organization-specific data.

Built-in categories

Each category can be paired with a data rule action to decide what happens on a match.

CategoryDetects
SSNU.S. Social Security numbers.
Credit cardPayment card numbers.
Routing numberBank routing (ABA) numbers.
Bank accountBank account numbers.
API keysProvider API keys and tokens.
PasswordsCredential-like password values.
Private keysCryptographic private key material.
EmailEmail addresses.
PhonePhone numbers.
Custom patternsOrganization-defined patterns configured through managed policy.

Custom patterns

Organizations can extend detection with custom patterns through managed policy — for example, internal identifiers or project codenames. See Managed policy JSON.