When to use Built-in Evaluators:
- You want to quickly add evaluation without platform configuration
- You’re running experiments or online evaluations programmatically
- You want to use well-tested, standardized evaluation methods
- Saved Evaluators - Reuse configured evaluators across your project
- Custom Scoring - Send scores from your own evaluation logic
Available Evaluators
LangWatch offers evaluators across several categories:
Browse all evaluators →
API Keys & Secrets Detection
langwatch/api_keys_and_secrets_detection flags leaked credentials in trace content: provider and cloud API keys, tokens, private keys, and database connection strings. It uses the same detection rules as secrets redaction and works as a guardrail.
Seeing through privacy redaction
PII redaction and secrets redaction run when a trace is ingested, before an evaluation reads the stored content. So redaction does not silently turn these evaluators green, redaction replaces a removed value with a typed marker that names what it was ([PHONE_NUMBER], [SECRET], and so on), and the PII and secrets evaluators read those markers back: a value that was already redacted still counts as a detection. The PII evaluator only counts a marker when its settings still check that entity. The markers are read from every field the evaluation is mapped to, so a secret hidden in a mapped span attribute is covered just like input or output.
If a content category was dropped at ingestion (removed entirely rather than masked) and the evaluation has nothing else to read, the evaluation fails, since a leak cannot be ruled out. If the evaluation is instead mapped to a field that still has content, that field is evaluated normally.