Security audit prep
Find files stored where they shouldn’t be, triage the matches and hand your auditor a clean report.
Triaging findingsThe PII scanner that never sees your data
PII Crawler finds Social Security numbers, card numbers, dates of birth and 30+ other kinds of personal data in your files, network shares and email. It runs entirely on your own hardware, with no cloud, no account and no telemetry.
Free for 7 days. No account or credit card needed. Other platforms
Runs on your hardware
Nothing you scan is uploaded
macOS, Windows, Linux
Desktop app, web UI and CLI
Signed builds
Notarized on macOS, Authenticode on Windows
One-time license
$497, every update included
PII ends up in places nobody put it on purpose
A spreadsheet export on a shared drive, a scanned form in a support ticket, a backup nobody owns. PII Crawler finds it before an auditor, a regulator or an attacker does.
Access requests (DSAR)
When someone asks what you hold on them, find every file and mailbox that mentions them and produce a report for legal.
DSAR walkthroughMailbox audits
Years of attachments pile up in shared inboxes. Scan any IMAP account, Gmail included, without downloading a copy of the mail.
Scanning emailContinuous monitoring
Watch an export folder or file share and get a webhook the moment a file with SSNs or card numbers lands in it.
Watch modeDrive disposal
A quick format isn’t proof. Scan each disk before it goes to the recycler, scan again after the wipe and keep the clean report.
CLI referenceBuild pipelines
Fail a build when customer data leaks into a repository, a test fixture or a release artifact.
CLI referenceFinds PII where other scanners don’t look
Pattern matching is combined with name and address recognition, and PII Crawler reads inside the places PII hides: spreadsheet cells, slide decks, archives, mailboxes and the scanned pages inside PDFs. Every match shows the text around it, so you can judge it without opening the file.
- Documents
- PDF with OCR, Word, Excel, PowerPoint, OpenDocument, Apple iWork, RTF
- Images
- JPEG, PNG, TIFF and more, read with OCR
- EML, MSG, MBOX, PST, and live IMAP accounts including Gmail
- Archives
- ZIP, 7z and tarballs, opened in place
- Data
- CSV of any size, SQLite and Access database files
- Locations
- Local disks, SMB and NFS network shares
Detects SSNs, card numbers, bank and tax IDs, names, addresses, dates of birth, passports and more. All PII types
Clear the noise in minutes, not afternoons
Every real scan turns up values that look like PII and aren’t: test fixtures, sample data, a vendor SDK. Dismiss them at the right scope and they stay dismissed. Your decisions are saved with the scan, so running it again never undoes your review.
- Mark a value as a false positive and every occurrence of it clears at once.
- Ignore a whole folder such as
vendor/ortests/in one click. - Export what’s left as a CSV or an HTML report for your records.
Scan any server you can SSH into
No agents to install and nothing to register. PII Crawler is a single file: copy it to a server, run it, and scan and review from the terminal. Or skip the interface and write a report directly.
# copy it over and start the terminal interface scp piicrawler admin@fileserver:~ ssh -t admin@fileserver ./piicrawler # or scan straight to a report ./piicrawler scan /srv/shares --out report.csv
Your data never leaves your network
Cloud discovery tools want your files before they will tell you what’s in them. PII Crawler reads them where they are. You can verify that yourself: run a scan on an air-gapped machine, or watch it with a network monitor.
No network calls during file scans
No license check, telemetry or update probe while a scan runs. It works on a machine with no network at all.
No account, no SaaS
You get a signed program, not a service. There is nothing to be deprecated, breached or repriced.
Evidence for your compliance records
Reports show which categories of personal data you hold and where, the inventory GDPR Article 30, CCPA and HIPAA reviews ask for.
Results stay on your machine
Findings are kept in a local database readable only by your user account, and you can wipe them at any time.
Built by a small team with no reason to want your data
PII Crawler is made by Eligian Labs, a small independent company. The people who write it are the people who answer [email protected]. There is no investor and no data business behind it. The license is the whole business, so the product has no reason to phone home.
“I was using PII Crawler to prep for a 3rd party security audit. It generated a detailed report and made finding improperly stored files much easier.”
“I appreciate your ongoing development of the product and super fast support!”
One price. Yours to keep.
Enterprise discovery platforms bill per user or per gigabyte, every year, after months of procurement. PII Crawler is a single purchase that fits on a company card, so you can buy it today and scan this afternoon.
The average data breach costs $4.44M (IBM, 2025). Most start with a file nobody knew was there.
PII Crawler license
$497one-time
- Unlimited users, machines and scans
- Every future update included
- macOS, Windows and Linux
- Desktop app, web UI and CLI
- Email support from the people who build it
14-day money-back guarantee, no questions asked.
Start scanning in minutes
The full product, free for 7 days. No account, no credit card, and nothing leaves your network.
Your first findings in three commands
-
Unpack it and put it on your PATH
tar -xzf piicrawler-cli-linux.tar.gz sudo mv piicrawler /usr/local/bin/
-
Try it on throwaway sample data. Nothing on your disk is touched.
piicrawler demo
-
Scan a real folder and write a report
piicrawler scan ~/share --out report.csv
Prefer a graphical interface? Open the macOS app or run the Windows installer and the web UI opens in your browser. Read the quickstart
Existing customer on a first-generation (Java) build? Legacy downloads
Questions
Something else? Email [email protected] and you’ll hear back from an engineer.
Yes. No monthly fees, no per-user fees, no support contracts, no renewals. You don't rent PII Crawler. You buy it. The binary is yours.
Yes. Every future version is included with your license at no extra cost. Download the new build, or run
piicrawler update from the command line. Your scans, review decisions, and license carry over.macOS (Apple Silicon), Windows, and Linux. Both a desktop GUI and a CLI build are available for each platform.
Files on local disks and network shares (PDFs including scanned pages, Office documents, spreadsheets, CSV, archives and images), email accounts over IMAP including Gmail, and database files such as SQLite and Access. Scanning hosted SQL databases is on the roadmap.
SSN, email, phone, full name, street address, city / state / ZIP, date of birth, credit-card numbers, IBAN, IP, passport, plus 20+ additional types. New types ship regularly.
Yes. The CLI writes JSON or CSV, and
--fail-on-findings or --fail-on-risk high makes a build fail when PII turns up. Run it from cron, GitHub Actions, GitLab CI or anywhere else.No. PII Crawler reads and analyzes files on the machine it runs on, and nothing it reads or finds is sent anywhere. Results are kept in a local database on that machine.
Every build is signed: Apple-notarized on macOS, Authenticode on Windows. During scans it makes zero outbound network calls: run it on an air-gapped machine, or watch it with a network monitor and the counters stay at zero. The security docs describe the full model.
The download is the demo. Fully functional for 7 days with no credit card and no account. Run it on your data and decide.
Scanning pauses until you register a license. Your install and any reports you've already exported stay put. Buying drops a license key into the same install, so you pick up exactly where you left off. No reinstall, no re-scan, no account to create.
14-day money-back, no questions asked.