Toad 184.108.40.206 x64
have all Sensitive options dfault:
Having selected which rules you want to use, you can now expose (via orange markers in the left gutter) where table columns are being used which could contain sensitive data across your databases as you can see in the Alter Table script below.
But in mine Alter table, nothing is marked as sensitive:
I am expecting that at least First name would be marked, but it is not.