diff --git a/README.md b/README.md
index 98f1a2b..c31ba96 100644
--- a/README.md
+++ b/README.md
@@ -102,6 +102,7 @@ A curated list of awesome Node.js Security resources.
 - [DOMPurify](https://github.com/cure53/DOMPurify) - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
 - [envalid](https://github.com/af/envalid) - Envalid is a small library for validating and accessing environment variables in Node.js.
 - [data-guardian](https://www.npmjs.com/package/data-guardian) - data-guardian is a tiny, highly customizable lib which can mask sensitive data in arbitrary entities and can help with [OWASP Protect Data everywhere](https://owasp.org/www-project-proactive-controls/v3/en/c8-protect-data-everywhere).
+- [flare-redact](https://github.com/flare-collection/flare-redact) - Zero-dependency secret & PII redaction for logs, objects, and LLM prompts: content-based detection with checksum-validated detectors, reversible encrypted vaults, and pino/winston/Express integrations.
 - [is-path-inside-secure](https://www.npmjs.com/package/is-path-inside-secure) - is-path-inside-secure is a symlink-aware implementation of the popular [is-path-inside](https://www.npmjs.com/package/is-path-inside) npm package, designed to help prevent path-traversal vulnerabilities.
 - [spotlighting-datamarking](https://www.npmjs.com/package/spotlighting-datamarking) - spotlighting-datamarking provides a lightweight implementation of the [Spotlighting paper’s techniques](https://arxiv.org/abs/2403.14720), offering data delimiting, datamarking, and optional Base64 encoding to help separate data from instructions and reduce susceptibility to indirect prompt-injection attacks.
 - [promptpurify](https://www.npmjs.com/package/promptpurify) - structural prompt firewall for LLM apps, with a trained classifier for prompt-injection and jailbreak inputs.