verifier.org

Highlight.io

regex-matches emails, ssns, card numbers, addresses and ips anywhere on the page, not just in form fields.

$50/mo for 500 sessions#teams-who-want-pii-caugh#including-rendered-text

the widest automatic pii detection of the open-source options, with no published rate at the volume this page compares.

most tools mask inputs. highlight masks inputs and then goes looking: by default it 'will obfuscate all inputs and any text that matches commonly used regex expressions of personally identifiable information', naming emails, ssns, phone numbers, credit card numbers, unformatted 9-16 digit sequences, addresses and ip addresses. that catches the case the input-only maskers miss entirely — pii rendered onto the page rather than typed into it, like an order confirmation showing the customer's address back to them.

the controls are granular: a `strict` setting for more aggressive masking, `none` to disable, and css classes (`highlight-ignore`, `highlight-block`, `highlight-mask`) for element-level overrides. most of the repo is apache 2.0, with the `highlight.io/` and `enterprise/` directories under separate licences.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
$50/mo for 500 sessions
our verdict

the widest automatic pii detection of the open-source options, with no published rate at the volume this page compares.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more session replay tools

Matomo Session Recording

replay inside a self-hostable analytics suite, no third-party data sharing

#self-hosted#privacy

Wingify Analytics

replay and heatmaps from the vwo team, now sold under the wingify brand

#ab-testing#heatmaps

UXCam

session replay for native mobile apps rather than the web

#mobile#native

Microsoft Clarity

we checked thisfree

input masking you are not allowed to switch off, free, with no traffic limit — and a business model worth understanding.

#teams-that-want-the-safe#cannot-rely-on-developer