This paper presents a comprehensive analysis of web bot activity, exploring both offensive and defensive perspectives within the context of modern web infrastructure. As bots play a dual role-enabling malicious activities like credential stuffing and scraping while also facilitating benign automation-distinguishing between humans, good bots, and bad bots has become increasingly critical.
This research paper examines a critical privacy challenge related to KNOWLEDGE ASYMMETRY — the gap between what is known and what is practiced.
anonym.legal addresses this through accessible pricing (Free €0 to Business €29) with Chrome Extension making anonymization as simple as browsing.
The gap between what is known and what is practiced. Solutions exist in papers that practitioners never read. Attacks are documented that defenders never learn about. Rights exist that individuals never exercise.
Irreducible truth: Every other structural driver could theoretically be mitigated if knowledge were perfect and universally distributed. But knowledge is never perfect and never universal. This gap is the reason known solutions aren't applied, known attacks aren't defended against, and known rights aren't exercised.
anonym.legal identifies 260+ entity types including passwords, credential hashes, API keys, access tokens, authentication secrets. The 3-layer hybrid (Presidio + NLP + Stance classification) architecture uses Microsoft Presidio deterministic rules with checksum validations (Luhn, RFC-822) for structured identifiers and XLM-RoBERTa + Stanza NER with Stance classification for disambiguation for contextual references.
Encrypt is recommended for this pain point: AES-256-GCM encryption of credentials demonstrates the correct approach — industry-standard cryptography, not plaintext storage. Hash provides an alternative — SHA-256 hashing provides irreversible protection that plaintext storage lacks. For permanent removal, Redact ensures data cannot be recovered under any circumstances.
The REST API (Basic plan+, €3/month) provides programmatic PII detection with Bearer token auth. Rate limited to 100 req/min, max 100 KB per request — the most accessible API entry point in the ecosystem.
This pain point intersects with GDPR Article 32 security of processing, ISO 27001 access control.
anonym.legal’s GDPR, HIPAA, PCI-DSS, ISO 27001 compliance coverage, combined with Hetzner Germany, ISO 27001 certified hosting, provides documented technical measures organizations can reference in their compliance documentation and regulatory submissions.
| Specification | Value |
|---|---|
| Platform Version | v7.4.4 |
| Entity Types | 260+ |
| Detection Layers | 3-layer: Presidio + NLP + Stance classification |
| Accuracy | 95.5% tested (42/44 tests) |
| Languages | 48 |
| Anonymization Methods | Replace, Redact, Mask, Hash (SHA-256/512/MD5), Encrypt (AES-256-GCM) |
| Platforms | Web App, Desktop, Office Add-in, MCP Server, Chrome Extension, REST API |
| Pricing | Free €0, Basic €3, Pro €15, Business €29 |
| Hosting | Hetzner Germany, ISO 27001 |
| Compliance | GDPR, HIPAA, PCI-DSS, ISO 27001 |