Database Security Service

Database Security Service (DBSS) is a smart database protection service. With the reverse proxy and machine learning technologies, the service is able to provide such functions as sensitive data discovery, data masking, database auditing, and injection prevention.

Product Advantages
  • Easy to Use

    DBSS can be purchased with one click, and its software nodes are automatically deployed. In addition, it is easy to operate and does not require changes to your database configurations.

  • Smart

    DBSS supports fine-grained rights control and configurations. It uses a mechanism based on feature identification and scoring to prevent mis-reporting.

  • Regulation-Compliant

    DBSS complies with the HIPAA, SOX, and PCI DSS. To meet auditing requirements, it supports sensitive data discovery, dynamic data masking, and remote audit log storage.

  • Reliable

    DBSS supports active-passive disaster recovery to ensure service continuity and availability.

Application Scenarios
  • Attack Prevention

  • Data Masking

  • Auditing

Attack Prevention

Attack Prevention

Various policies are provided to prevent database attacks.


End-to-End Database Firewall

Intrusion detection and defense utilities can be tailored to the particulars of your database. DBSS provides a host of capabilities ranging from SQL injection prevention and access control.

Multi-dimensional Security Policies

DBSS provides security policies that are based on query groups, tables, or stored procedures.


DBSS instances can learn by themselves. After each user-defined "learning session", security policy recommendations that can be accepted or rejected are generated.

Data Masking

Data Masking

DBSS can discover and dynamically mask sensitive data in your database.


Regulatory Compliance

The ability to discover sensitive data helps you keep your organization in compliance.

Multiple Masking Rules

DBSS provides a wide variety of masking rules. Data can be masked in specific tables or against queries from specific IP addresses, users, or applications.


With a precise masking engine, DBSS masks sensitive data in real time without compromising service performance. Masked data is not changed in storage.



DBSS provides database auditing capabilities.


Regulatory Compliance

Audit logs are saved remotely, as required by regulations.

Multi-dimensional Auditing

DBSS tailors audit reports for pre-event analysts, post-event analysts, common users, and administrators.

Anomaly Monitoring

DBSS monitors anomalies in performance, data, and actions.


  • Various Databases Supported

    Supports SQL Server, MySQL, and PostgreSQL databases.

  • Database Protection

    Provides a firewall based on queries, tables, or stored procedures, detects and defends against intrusions in real time, and notifies you about detected intrusions.

  • Database Activity Monitoring and Auditing

    Monitors management and access activities at the column level, monitors and analyzes database activities separately, and sends alarms when unauthorized actions are attempted.

Various Databases Supported

Database Protection

Database Activity Monitoring and Auditing

  • Sensitive Data Discovery

    Automatically locates and categorizes sensitive data based on rules and allows you to create masking or auditing rules easily.

  • Dynamic Data Masking

    Dynamically masks sensitive data, allaying your worries over exposed information.

Sensitive Data Discovery

Dynamic Data Masking

Usage Guides

Provides Scalable, On-demand Computing Resources

Learn More