1. A method for generating a secure sandbox environment, the method comprising: a computer identifying components of a production environment including one or more server computers, one or more storage devices, and one or more applications, wherein the production environment includes sensitive information and utilizes the sensitive information during operation; the computer receiving a security policy that defines which information included in the production environment is sensitive information, and in response, identifying the sensitive information that is stored in the production environment based on the received security policy, wherein the identified sensitive information comprises: a first set of sensitive information that includes user names and passwords, and a second set of sensitive information that includes confidential data that the production environment utilizes after a login to the production environment; the computer modifying the second set of sensitive information that is stored in the production environment, in a manner that allows the production environment to utilize the modified sensitive information without error or additional modification to the modified sensitive information, and the identified sensitive information cannot be identified from the modified sensitive information; and the computer generating a sandbox environment based, at least in part, on the identified components of the production environment and the modified sensitive information, wherein the generated sandbox environment is capable of utilizing the modified sensitive information in the same manner that the production environment utilizes sensitive information.