Eligian Labs

Organizations need to find unencrypted PII like SSNs, addresses, and DOBs scattered across files, network shares, and databases, but cloud DLP and SaaS scanners require ingesting those files into someone else's cloud to analyze them, which security teams don't want. PII hides in places generic scanners miss: embedded source data inside slide XML, forgotten backup archives on public shares, and screenshots or scanned images attached to support tickets. Decommissioned laptops and drives also leave the building without real proof they're clean, since a factory reset or quick format isn't verifiable. Enterprise SaaS alternatives are also expensive, billing per-user or per-GB and requiring annual renewals and procurement cycles.

PII Crawler is a single static binary that scans local disks, SMB/NFS network shares, and SQL databases (Postgres, MySQL, SQL Server) entirely on the user's own hardware, with zero outbound network calls during scans. It combines pattern matching with named-entity recognition to detect 30+ PII types across PDFs (with OCR on embedded images), Office formats, CSVs of any size, and archives like zip/tar.gz/7z opened in place. Database scans read a bounded, in-memory sample over a direct connection without writing to disk. Triage features let users mark values as false positives everywhere at once or ignore entire folders, with verdicts persisting across reruns, and the CLI can export JSON/CSV reports or fail CI/CD builds via --exit-code-on. It also supports a workflow for verifying decommissioned drives are clean before disposal by scanning before and after wiping.

The average data breach costs $4.44M according to IBM's 2025 report, and breaches often start with a file nobody knew contained PII, positioning a self-hosted scanner as a way to find exposure before it becomes a breach.