1. A method for generating a secure sandbox environment, the method comprising: a computer identifying components of a production environment including one or more server computers, one or more storage devices, and one or more applications, wherein the production environment utilizes sensitive information during operation; the computer receiving a security policy defining what constitutes sensitive information, and in response, identifying the sensitive information; the computer modifying the sensitive information such that the production environment could utilize the modified sensitive information without error and such that the sensitive information cannot be identified from the modified sensitive information; and the computer generating a sandbox environment based, at least in part, on the identified components of the production environment and the modified sensitive information.