Privacy & Data

What Kanari collects, what it redacts, and how to verify

Design principle

Kanari is built for production environments where task arguments, queue payloads, and worker names can contain sensitive data. The agent applies privacy transformations before any data leaves your infrastructure.

Task arguments are never accessed. The agent reads queue messages only to extract metadata (timestamps, task name, task ID). Payload content is never parsed, stored, or transmitted.

---

What gets collected

Queue metrics

Field	Example value	Privacy treatment
Queue name	emails	Sanitized (emails/UUIDs removed)
Queue depth	847	Collected as-is
Oldest task age	125.4s	Collected as-is

Worker metrics

Field	Example value	Privacy treatment
Worker hostname	[e-mail]	Hashed to w-a1b2c3d4
Active task count	3	Collected as-is
Concurrency	8	Collected as-is
Alive/offline status	true	Collected as-is

Task metadata

Field	Example value	Privacy treatment
Task ID	550e8400-e29b-41d4-a716-446655440000	Hashed to t-8f3a2b1c4d5e
Task name	myapp.tasks.process_user_12345	Sanitized
Task arguments	{"user_id": 123, "email": "..."}	Never accessed
Task result	{"status": "ok", ...}	Never accessed

---

Sanitization rules

Worker names

Worker hostnames are hashed with SHA-256 (first 8 hex chars) and prefixed with w-:

[e-mail]  →  w-a1b2c3d4
celery@ip-10-0-1-234           →  w-7f2e9b1c

A display name is also extracted for readability (domain stripped):

[e-mail]  →  display: "prod-worker-1"
celery@ip-10-0-1-234           →  display: "ip-10-0-1-234"

Task IDs

Task IDs (UUIDs) are hashed with SHA-256 (first 12 hex chars) and prefixed with t-:

550e8400-e29b-41d4-a716-446655440000  →  t-8f3a2b1c4d5e

Task signatures

Task names are sanitized to remove patterns that commonly contain PII:

Pattern	Example	Result
Email addresses	[e-mail]	send_email_[email]
UUIDs	process_order_550e8400-e29b...	process_order_[uuid]
Numeric IDs (4+ digits)	notify_user_98765	notify_user_[id]

Queue names

Queue names are also sanitized for emails and UUIDs:

[e-mail]                          →  emails-[email]
tenant-550e8400-e29b-41d4-a716-446655440000   →  tenant-[uuid]

---

Disabling sanitization

If your task names contain no PII (e.g., all names are static identifiers like myapp.tasks.send_invoice), you can disable sanitization:

# kanari.yaml
privacy:
  sanitize_task_signatures: false

This sends task names as-is, which makes findings easier to read.

---

Verifying what gets sent

Run in local mode with JSON output to inspect exactly what the agent collects in your environment before connecting to any external service:

kanari audit --json | python3 -m json.tool

In agent local mode, every cycle’s payload is logged to stdout:

kanari agent --local

---

Data in transit

When using kanari agent in API mode, data is sent over HTTPS to api.getkanari.com. The agent uses Python’s stdlib urllib (no third-party HTTP library). No data is stored locally between cycles.