--- title: "Redacting Data from Heap Dumps via hprof-redact - Mostly nerdless" url: https://daily.dev/posts/redacting-data-from-heap-dumps-via-hprof-redact---mostly-nerdless-w9ixyhgcz source_url: https://mostlynerdless.de/blog/2026/02/24/redacting-data-from-heap-dumps-via-hprof-redact/ type: article source: "Mostly Nerdless" published: 2026-03-16T08:15:24.552Z updated: 2026-03-16T08:31:21.339Z tags: ["security", "java"] reading_time: 6 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Redacting Data from Heap Dumps via hprof-redact - Mostly nerdless **[Mostly Nerdless](https://daily.dev/sources/mostly-nerdless)** · 6 min read · 0 upvotes · 0 comments ## Summary Java heap dumps can expose sensitive data like passwords and secrets stored on the heap. hprof-redact is a new open-source CLI tool and library that addresses this by nulling out primitives and string values in HPROF heap dump files. It supports three built-in transformers (zero, zero-strings, drop-strings) and can be used as a Maven library to implement custom redaction logic via the HprofTransformer interface. The tool uses a two-pass parsing approach for efficiency with large files and is available via GitHub releases or jbang. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [I Asked GitHub Copilot to Profile a Java App. It Found a Bug in My Heap Sizing, and Offered to Fix It](https://daily.dev/posts/i-asked-github-copilot-to-profile-a-java-app-it-found-a-bug-in-my-heap-sizing-and-offered-to-fix-i-htjez5jfp) · Foojay.io · 4 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java) [View this post on daily.dev](https://daily.dev/posts/redacting-data-from-heap-dumps-via-hprof-redact---mostly-nerdless-w9ixyhgcz)