FileSentinel · Windows & macOS

Know what’s hidden in your files, before you share them.

FileSentinel scans your files and folders for sensitive data: Social Security numbers, payment cards, health records, credentials, and the metadata you forgot was there. Everything runs on your device. It collects nothing and makes no network connections to do its work.

v1.5.0 · Local-first · No cloud · OCR included · Redact & clean · Windows 10/11 & Mac

FileSentinel dashboard showing protection score, files scanned, findings, Crown Jewels, and severity breakdown.

By the numbers

25+
Built-in detectors
7
Asset tiers classified
100%
On-device scanning
0
Cloud uploads, by design

Why it matters

Every share is a risk. FileSentinel checks first.

Most data leaks aren’t dramatic hacks. They’re an attachment with a hidden column, a screenshot with a token, a PDF with a patient name. Small mistakes, real damage.

Sharing blind

  • Hidden columns, comments, and tracked changes go out with the file
  • Screenshots and scans carry visible SSNs, cards, and account numbers
  • Photos leak GPS coordinates and device IDs in their metadata
  • API keys and passwords sit forgotten in exports and config files
  • One wrong attachment can trigger a reportable breach
  • Cloud scanners ask you to upload the very data you're protecting

FileSentinel

  • Scans deep into documents, spreadsheets, images, and PDFs
  • OCR reads sensitive text inside screenshots and scanned pages
  • Ranks findings by severity and confidence so you triage fast
  • Redacts values and strips metadata to a clean copy in one click
  • Runs entirely on your device, so files never leave your machine
  • Built by a cybersecurity firm that lives in this threat model

Features

A full data-discovery toolkit, on your desktop.

Find it, understand it, fix it. FileSentinel covers the whole loop, from deep content scanning to one-click remediation, without a single byte leaving your machine.

Deep content scanning

Reads inside documents, spreadsheets, text, and PDFs to surface personal identifiers, payment data, health info, and secrets, not just file names.

Crown Jewels

Choose the data that matters most to you. Matching findings are escalated so your highest-risk exposure rises straight to the top of the list.

OCR for images & scans

Turns on text recognition for JPG, PNG, TIFF, WebP, and image-based PDFs, catching sensitive data hidden inside screenshots and scanned paperwork.

Confidence & severity

Every finding is scored for confidence and severity, so you can separate verified Critical hits from likely false positives at a glance.

Watched folders

Pick folders to monitor continuously. New or changed files are scanned automatically and a toast tells you the moment something needs attention.

Redact & strip metadata

Remediate in place: redact sensitive values or strip metadata to a clean copy. A full remediation history records exactly what changed.

Custom rules

Add your own detectors with plain-text or regex matching for project code names, internal IDs, or client identifiers, and flag them as Crown Jewels.

Exportable reports

Generate clean CSV, HTML, or PDF reports filtered by severity and confidence, for an audit trail, a colleague, or your own records.

100% local processing

Scanning, OCR, and remediation all happen on-device. No server, no cloud, no upload step. The data you're protecting never has to leave to be checked.

How it works

Scan. Review. Remediate.

Point FileSentinel at a folder, read a prioritized list of what it found, and clean up the risky bits before anything goes out the door.

Scan

Drag a folder or file in, add a network share, or run a Quick Privacy Check. Filters and OCR are one toggle away. Everything reads locally.

Review

Findings arrive ranked by severity and confidence, grouped by file and asset tier. See what was found, where, and why, with the value redacted.

Remediate

Redact values, strip metadata to a safe copy, mark false positives, or export a report. Then share knowing exactly what's inside.

FileSentinel dashboard: protection score, exposure by asset type, severity, and recent scans.

Dashboard: protection score and exposure at a glance.

FileSentinel scan screen with drag-and-drop targets, filters, and OCR toggle.

Scan: drop a folder, set filters, toggle OCR, start.

FileSentinel deep scan results table grouped by file, with severity, score, and remediation actions.

Results: ranked findings with inline remediation.

FileSentinel watched folders screen showing continuous monitoring.

Watched: continuous protection for chosen folders.

FileSentinel remediation history listing redacted or cleaned files.

Remediation: a full history of what changed, and where.

FileSentinel reports screen for generating CSV, HTML, or PDF reports.

Reports: export by confidence floor and severity.

FileSentinel rules screen showing built-in detectors and a custom rule builder.

Rules: built-in detectors, plus your own.

What it finds

Seven asset tiers, one clear picture.

FileSentinel sorts what it finds into tiers, so you instantly understand the shape of your exposure. Built-in detectors cover the common cases, and custom rules cover the rest.

Crown Jewels

Top priority
  • The categories you mark as most critical
  • Matching findings are escalated to the top tier
  • Driven by the Crown Jewels you choose in settings
  • Your most damaging exposure, surfaced first

Personal identifiers

PII
  • US Social Security numbers and taxpayer IDs
  • Passport and driver-license numbers
  • Dates of birth and personal names
  • Strong identifiers that drive identity theft

Payment cards

PCI
  • Credit and debit card numbers
  • Bank routing and account numbers
  • IBAN and SWIFT/BIC codes
  • The financial data that carries compliance weight

Health information

PHI
  • Health record identifiers and patient data
  • Medical record and insurance numbers
  • Health terms that signal regulated content
  • The data behind HIPAA-style obligations

Credentials & secrets

Secrets
  • API keys, access tokens, and secrets
  • Passwords left in exports and config files
  • Private keys and signing material
  • The credentials attackers want most

Metadata & location

Hidden data
  • GPS coordinates and device IDs in photos
  • Author, comments, and tracked changes in documents
  • Hidden revisions and embedded properties
  • The context you never meant to send

Who it’s for

Built for the moment before you hit send.

Anyone who shares files handles sensitive data, whether they realize it or not. FileSentinel is the quick check that keeps a routine share from becoming an incident.

Small business & pros

Accountants, lawyers, consultants, and clinics handle client data daily. Scan before you email an export or a scanned form.

Teams & IT

Watch shared drives and staging folders for stray PII, credentials, or payment data before it spreads or ships to the wrong place.

Privacy-minded individuals

Clean GPS data out of photos and strip personal details from documents before posting, selling, or handing a device on.

Customization

Tuned to your machine and your risk.

FileSentinel settings showing performance modes, OCR options, archive recursion, and Crown Jewels categories.

Choose a performance mode (Eco, Balanced, or Turbo), turn OCR on for the strongest coverage, recurse into archives, keep it running in the system tray, and define exactly which categories count as your Crown Jewels.

Eco / Balanced / TurboOCR engineArchive recursion System trayInclude / exclude globsCrown Jewels categories Custom rulesNetwork shares

FAQ

Frequently asked questions.

Does FileSentinel upload my files to the cloud?
No. All scanning happens on your machine. Your files and their contents never leave your PC. There is no server, no third party, and no upload step. FileSentinel is local-first by design.
What kinds of sensitive data does it find?
Personal identifiers (SSNs, passport and driver-license numbers, dates of birth), payment card and bank data (PCI), health information (PHI), credentials and secrets, confidential business markers, and hidden metadata such as GPS location in photos. You can also add custom rules for your own identifiers.
Can it read text inside images and scanned PDFs?
Yes. With OCR enabled, FileSentinel reads text inside JPG, PNG, TIFF, and WebP images and image-based PDFs, so sensitive data captured in a screenshot or a scan is caught too.
Can it remove or redact what it finds?
Yes. FileSentinel can redact sensitive values and strip metadata to a clean copy, and it keeps a remediation history so you can see exactly what was changed and where the cleaned file was saved.
What are Crown Jewels?
Crown Jewels are the data assets you care about most, such as personal identifiers, financial data, or health information. You choose which categories count, and findings that match are escalated so your most critical exposure rises to the top.
What operating systems does it support?
FileSentinel is available now for Windows 10 and Windows 11 via the Microsoft Store, and for macOS 13 Ventura or later (universal, Apple Silicon and Intel) on the Mac App Store.
How much does it cost?
$59.99, one-time, not a subscription. On Windows, purchase it from the Microsoft Store. On Mac, the app is a free download with a one-time $59.99 in-app purchase to unlock Pro; the free tier includes 5 scans and 3 redactions.
How do I get it?
On Windows: Microsoft Store. On Mac: Mac App Store.

Support

Questions? Open a channel.

Setup help, feature requests, or a privacy question. The support page and a direct line to the team are one click away.

Support articles: filesentinel-support.html

Windows: Microsoft Store

Mac: Mac App Store

Phone: (551) 236-3191, business hours, NYC metro

Runs entirely on your device. No account, no uploads, no telemetry.

Install FileSentinel