Arena technique · Look-alike
Can Look-alike hide API keys from a PII filter?
Some letters are swapped for look-alikes from other alphabets, such as a Cyrillic а for a Latin a. The text looks the same to a person and different to a pattern. The AI Node normalizes them first.
Tested by the shapeshifter against a copy of the current AI Node, with fake keys only. See the full coverage board.
Every secret type, hidden with Look-alike
| Secret | Vrymdor AI Node | Basic regex |
|---|---|---|
| Private key | Blocked | Missed |
| JWT sign-in token | Blocked | Missed |
| Vrymdor access token | Blocked | Missed |
| Bearer token | Blocked | Missed |
| Anthropic key | Blocked | Missed |
| OpenAI key | Blocked | Missed |
| Stripe key | Blocked | Missed |
| GitHub token | Blocked | Missed |
| AWS key | Blocked | Missed |
| Google key | Blocked | Missed |
| Slack token | Blocked | Missed |
The latest attempt
No published attempt yet
The latest attempt for Look-alike shows here after the next published Rival Run.
Compared with a basic regex filter
From 14 stored attempts hidden with Look-alike. The basic regex result is computed on the same attempts.
- Vrymdor AI Node
- 14 of 14 blocked
- A basic regex filter
- 0 of 14 caught
Put the tested version in your workflow
The same AI Node the Rivals attack runs in your n8n workflow or over the API.
Free scanner: Paste your n8n workflow and see what it leaks today.