The Acra homepage
Score7.0
Rank#3 of 23
From$833.33/mo
Free planYes
Runs onAndroid, API, iOS, Linux, Self-hosted

Summary

Acra protects sensitive data held in SQL and NoSQL databases, web applications, and backend applications. It offers field-level and searchable encryption, tokenization, and data masking. Teams can deploy it as a transparent SQL proxy, an HTTP/gRPC encryption API, or client-side SDKs. AcraServer supports PostgreSQL and MySQL wire protocols, including MariaDB, while listed NoSQL and key-management integrations include MongoDB, Redis, Cassandra, TimescaleDB, Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz, and HSMs. It can detect access attempts involving planted poison records or honeytokens, issue alarms, and halt decryption. Security logging supports SIEM/SOC analytics, and a signed audit log records access and security events. Server components run on Linux, with Docker and Kubernetes-compatible images documented. Acra is described as cloud-agnostic and supported on Google Cloud Platform, AWS, and DigitalOcean. Community Edition is free; Enterprise Edition starts at $10,000 per year, with price dependent on deployments and requested features.

Who it is for

Community Edition is described as suited to prototyping and small-scale projects. Enterprise Edition is aimed at large-scale and enterprise deployments needing broader features and support options.

What is good

  • Offers encryption, tokenization, and data masking
  • Supports SQL, NoSQL, and key-management integrations
  • Can alert and halt decryption on planted-record access
  • Provides security logging and signed audit logs
  • Cloud-agnostic deployment with Linux server components

What to know first

  • Server components should not run on Windows hosts
  • Community Edition lacks MySQL Protocol X support
  • Enterprise Edition starts at $10,000 per year

Verdict

Acra provides several ways to protect application and database data, with options for both community use and enterprise deployments. Windows is supported as a client platform, but not as the server host operating system.

Acra plans and pricing

All plans
Acra Community Edition Free FREE; free forever for non-profit and business use Encryption and masking · SQL request firewall · Basic intrusion detection · Single configuration policy cossacklabs.com · 30 Sept 2026
Acra Enterprise Edition $10,000/yr Starting at $10000 annually Pricing depends on number of deployments and features requested · All Acra features and controls · Various support tiers · DevOps / SRE tooling · Policy management cossacklabs.com · 30 Sept 2026
Acra bespoke solution Not published Pricing depends on included services and varies on a case-by-case basis. Customized masks and protocols · Customized behavior · Use case specific features · Engineering and architecture support cossacklabs.com · 30 Sept 2026

Compared on cloud encryption software

Free plan
Yescossacklabs.com
Customer key control
mixedcossacklabs.com
External KMS support
Yescossacklabs.com
Deployment options
hybridcossacklabs.com
Cloud coverage
cloud-agnosticcossacklabs.com
Automated key rotation
Yescossacklabs.com
Protected data types
multiplecossacklabs.com

Facts

Purpose
Acra protects sensitive data in SQL and NoSQL databases, web applications, and backend applications.cossacklabs.com · 30 Sept 2026
Encryption options
Acra offers field-level encryption, searchable encryption, tokenization, and data masking.cossacklabs.com · 30 Sept 2026
Deployment forms
Acra can run as a transparent SQL proxy, an HTTP/gRPC encryption API, or client-side SDKs.cossacklabs.com · 30 Sept 2026
Database support
AcraServer supports PostgreSQL and MySQL wire protocols, including MySQL 5.7+, PostgreSQL 9.4+, and MariaDB 10.3.docs.cossacklabs.com · 30 Sept 2026
NoSQL integrations
The maker lists MongoDB, Redis, Cassandra, and TimescaleDB among supported NoSQL/KV data stores.docs.cossacklabs.com · 30 Sept 2026
Key management integrations
The maker lists Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz, and HSMs for key storage and management integration.cossacklabs.com · 30 Sept 2026
Intrusion detection
Acra can detect requests for planted poison records or honeytokens, raise security alarms, and halt decryption.cossacklabs.com · 30 Sept 2026
Audit and SIEM
Acra provides security logging for SIEM/SOC analytics and a crypto-signed audit log covering access and security events.cossacklabs.com · 30 Sept 2026
Deployment platforms
Server components run on Linux distributions including CentOS, RHEL, Debian, and Ubuntu, and the maker documents Docker and Kubernetes-compatible images.docs.cossacklabs.com · 30 Sept 2026
Cloud hosting
Acra is described as cloud-agnostic and actively tested and supported on Google Cloud Platform, AWS, and DigitalOcean.docs.cossacklabs.com · 30 Sept 2026
Windows limitation
The maker says server-side Acra components should not run on Windows as the host operating system; Windows clients can connect to Acra on a Linux server.docs.cossacklabs.com · 30 Sept 2026
Community Edition limitation
Acra Community Edition does not support MySQL Protocol X.docs.cossacklabs.com · 30 Sept 2026
Intended users
The maker describes Community Edition as best for prototyping and small-scale projects and Enterprise Edition as suited to large-scale and enterprise deployments.cossacklabs.com · 30 Sept 2026
Support
The maker offers multiple support tiers and describes integration assistance, solution support, and 24/7 solution support among its offerings.cossacklabs.com · 30 Sept 2026
Evaluation
The maker offers a free evaluation playground running Acra Enterprise Edition for selected popular use cases.cossacklabs.com · 30 Sept 2026

Company

Founded
2014cossacklabs.com · 28 Sept 2026
Headquarters
London, United Kingdomcossacklabs.com · 28 Sept 2026

Best Acra alternatives

See all 12

Where it ranks on Everything Xiaomi

Is Acra yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources