Nightfall's API currently supports the following detectors pre-built by Nightfall covering a variety of PII, PHI, PCI, and secrets/credentials.
For ease of use, you may use the text in the Name column as an identification code within your API calls instead of the UUID of the Detectors in the Nightfall Dashboard.
In addition to the provided list, the API supports both custom REGEX and WORD_LIST detector types. Any of these detectors can be customized with Context Rules or Exclusion Rules specific to your needs.
To avoid non-sensitive violation counts, Nightfall recommends that common entity detectors be combined with one or more other detectors OR can be used singularly with minimum findings count greater than or equal to 10.
For example, you can add rigor to a US Social Security Number detection rule by including Person Name and configuring the rule to trigger a finding when both data types are found
|Detects a date associated with a person's birth.
|Detects valid e-mail addresses.
|Detects a person's name, including first, middle, and last names.
|Detects a phone number. The number can include an area code and country code.
|Detects street address, address number, street, city, state, and zip code.
|Detects a Brazilian Natural Person Registry number (CPF number), an 11-digit number with format 000.000.000-00.
|Detects a Canadian bank account number, typically a 15-20 digit number.
|Detects British Columbia personal health numbers. The 10-digit personal health number is assigned to individuals to receive health services in the British Columbia province. This token must pass the checksum validation.
|Detects Canadian driver's license numbers.
|Detects Canada government ID numbers. This number is provided to all residents that do not have a driver’s license, used for general identification purposes.
|Detects an Ontario health insurance plan number. This 10-digit personal health number is assigned to individuals for health services in Ontario province.
|Detects a Canadian passport number, an 8-character alphanumeric identifier.
|Detects a Canada permanent resident number, a 9-12 alphanumeric token assigned to permanent residents in Canada who are not Canadian citizens.
|Detects Quebec health insurance numbers. This 12 alphanumeric token is a personal health number assigned to individuals to receive health services in Quebec province.
|Detects a Canadian Social Insurance number (SIN). This number is required for accessing government benefits and for employment verification.
|Detects US driver's license number, an alphanumeric string varying in a format unique to the issuing state.
|Detects a US individual taxpayer identification number (ITIN)
|Detects a US passport number, typically a 6-9 character alphanumeric string.
|Detects US social security number (SSN), a 9-digit numeric string often used as a unique identification number for United States citizens and residents.
|Detects US vehicle identification number, a 17-character alphanumeric string used to identify a motor vehicle uniquely.
|Detects an Australian driver''s license number: A 8-, 9-, or 10-digit number, or a 6-digit alphanumeric pattern depending on the issuing state or territory.
|Detects an Australian Medicare number: A 10- or 11-digit alphanumeric code with a specific format and check algorithm used to uniquely identify individuals eligible for healthcare services under the Australian Medicare system. The 11th digit is the Individual Reference Number (IRN) and it’s optional.
|Detects an Australian passport number, an 8- to 10-character alphanumeric string. Begins with one of these single letters (N,E,D,F,A,C,U,X) or one of these 2 letter combinations (RA,PA,PB,PC,PD,PE,PF,PU,PW,PX,PZ).
|Detects an Australian tax file number (TFN), a 9-digit numeric string with a specific format and check algorithm issued to identify individuals for AU tax purposes uniquely.
|Detects a French CNI (carte nationale d’identité) number. A CNI is a national identifier frequently used when opening a bank account.
|Detects a France INSEE (National Institute of Statistics and Economic Studies) number, also known as the National Identification Number. An INSEE is composed of 13 digits + a two-digit key.
|Detects a France passport number, typically a 9-character alphanumeric string.
|Detects a Germany ID number. The German identity card, Personalausweis, is used as a national identifier.
|Detects a German passport number, typically a 9-character alphanumeric string.
|Detects an India Aadhaar card number, 12 digit number issued to all Indian residents that include an individual's biometric and demographic data.
|Detects an Indian Permanent Account Number (PAN), a 10-character alphanumeric token.
|Detects an Ireland passport number, typically a 10-character alphanumeric string.
|Detects an Ireland Personal Public Service Number (PPSN), an 8-9 alphanumeric code.
|Scotland Community Health Index (CHI) number, a 10-digit number used for identification in Scotland's National Health Service (NHS).
|Detects a UK driver's license number..
|Detects a UK electoral roll number.
|Detects a UK National Health Service number, a 10-digit number used for identification in the British National Health Service (NHS).
|Detects a UK National Insurance Number (NINO), a 9-character alphanumeric string. A NINO may also be used for tax purposes or other identification.
|Detects a UK passport, a 9-digit number.
|Detects a unique taxpayer reference (UTR) for individuals and entities paying taxes in the United Kingdom, typically a 10-digit number.
|Detects CUSIP (American Bankers Committee on Uniform Security Identification Procedures) codes, 9-character numeric or alphanumeric codes for identifying North American financial security.
|Detects credit card numbers, 12-19 digit number used for payments and other monetary transactions.
|Detects International Bank Account Number (IBAN) codes defined under the ISO 13616:2007 standard used to identify an individual’s account.
|Detects SWIFT (Society for Worldwide Interbank Financial Telecommunication) codes. A SWIFT code is an 8 or 11 alphanumeric identification code for banks used for financial transactions and other communications between banks. It is synonymous with a Bank Identifier Code (BIC).
|Detects bank routing numbers, a 9-digit code used to identify a financial institution in monetary transactions. MICR stands for magnetic ink character recognition.
|Detects a US employer identification number (EIN), also known as a Federal Tax ID number. An EIN is a unique identifier for US business entities.
|Detects protected health information (PHI). HIPAA defines PHI as data that uniquely identifies an individual plus a diagnostic indicator such as medication, diagnosis, and procedure.
|Detects brand and non-proprietary FDA drug names.
|Detects ICD10 codes (International Classification of Diseases, Tenth Revision). ICD10 is a series of codes used by medical practitioners to identify diagnoses and procedures.
|Detects ICD10 diagnoses or procedures.
|Detects a US healthcare national provider identifiers (NPI), a 10-digit identifier for US Medicare providers, individuals (physicians, dentists, pharmacists, etc.) and organizations (hospitals, clinics, pharmacies, etc.).
|Detects US health insurance claim number (HCIN), used as a Medicare identifier.
|Detects a US Medicare Beneficiary Identifier (MBI), an 11-character alphanumeric string given to all Medicare recipients and used in Medicare transactions.
|Detects an International Mobile Equipment Identity (IMEI) ID, a unique identification number programmed into GSM and UMTS mobile devices.
|Detects an internet protocol (IP) network address. An IP address is a numerical label used to identify a device connected to a network. This detector supports both IPv4 and IPv6 addresses.
|Detects a MAC address, a 12-digit hexadecimal value used to identify a network adapter. MAC stands for Media Access Control.
|Detects API keys, credentials needed to authenticate and authorize a cloud provider’s API request. Findings will include the vendor name and active key validation for the most popular services. See Detecting Secrets
|Detects private cryptographic keys. A cryptographic key is a data string used to lock or unlock cryptographic functions, including authentication, authorization, and encryption.
|Detects a database connection string, an expression that contains the parameters required for the applications to connect to a database server. Supports most popular databases.
|Detects passwords written in code and has been extended to include passwords shared in natural language contexts such as messages, sentences, and paragraphs. This detector targets user access or login access to a system
|Detects an image of a credit, debit, or gift card from any institution.
|Detects an image of a driver's license and government-issued identification card from any nation.
|Detects an image of a passport or visa from any nation.
|Detects an image of a US social security card.
Updated 3 months ago