A cross-platform desktop application that sanitizes hostnames, IP addresses and other sensitive data from Nessus, OpenVAS and Qualys report files. If you would rather not upload raw scan reports, anonymize them locally first — and send qReflector only the sanitized version.
Free · ZIP archive · Windows, macOS & Linux · Requires Java 17
Back to ProductThe Anonymizer prepares vulnerability scan reports for analysis without exposing your infrastructure. It runs entirely on your machine — nothing is uploaded until you decide what to share.
Replaces hostnames, IP addresses and other identifying values in your reports with anonymized placeholders.
Accepts report files from Nessus, OpenVAS and Qualys — the same formats qReflector reads.
A desktop application for Windows, macOS and Linux. Files are processed on your machine and never leave your environment.
Upload the sanitized output to qReflector for cryptographic infrastructure analysis.
Get the Anonymizer as a ZIP archive, unpack it and run it — no installation required.
SHA-256
93018757a28798208f90a45c6d6f795c61990d209f39f9fb7633d2fcc6f66ada
Check the archive before you run it:
certutil -hashfile qreflector-anonymizer.zip SHA256 on Windows,
shasum -a 256 qreflector-anonymizer.zip on macOS or Linux.
Requires Java 17 or newer. The Anonymizer is a Java application — make sure Java 17+ is installed before running it. Eclipse Temurin is a free OpenJDK build for Windows, macOS and Linux; any other OpenJDK 17+ build works as well, as does Oracle's own distribution.