DSGuard

What it does

Access and threat controls

Listed controls include TOTP MFA, IP-based access control, role- and object-level permissions, SQL injection protection, dangerous-function blocking and rate limiting.checked 30 Sep 2026

AI sandbox shell

The AI sandbox shell offers command rules, output masking, per-domain egress controls, Landlock-based filesystem allowlists, live session controls and audit logging.checked 30 Sep 2026

Audit

The gateway logs queries with identity, decisions and block reasons; Database Activity Monitoring adds native database audit, including access that bypasses the gateway.checked 30 Sep 2026

Community edition limit

Community is self-installed and self-managed, with no expiry, feature gating or capacity cap; the site says it has no support entitlement.checked 30 Sep 2026

Compliance

The site describes technical controls and audit evidence supporting PCI DSS, ISO 27001, SOX, HIPAA, GDPR and KVKK, and says DSGuard is not itself a certification.checked 30 Sep 2026

Database coverage

The site lists PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, MariaDB through the MySQL-compatible wire protocol, MongoDB and ClickHouse.checked 30 Sep 2026

Data protection

Features include full, partial and hash dynamic masking, column-level access control, response leak detection, result limits and query-result truncation.checked 30 Sep 2026

Deployment

DSGuard can be deployed on-premises, in private or public cloud, or in hybrid environments; the site names AWS, Azure and GCP compatibility for public cloud.checked 30 Sep 2026

Integrations

The site lists a Prometheus metrics endpoint, provisioned Grafana dashboards and centralized query and application logs for a SIEM.checked 30 Sep 2026

Intended users

The site says DSGuard is built to secure critical database infrastructure for regulated companies, including banking and finance, insurance, fintech platforms, data-intensive systems and high-volume databases.checked 30 Sep 2026

Product

DSGuard is an inline database security gateway that applies identity-aware access control, policy enforcement, dynamic masking and query-level audit between applications and databases.checked 30 Sep 2026

Support

Professional includes business-hours support Monday to Friday, 09:00–18:00 (GMT+4); Enterprise includes 24×7 support with a 4-hour response target; Community has no support entitlement.checked 30 Sep 2026

Transport security

The site states that client connections use TLS on every engine, supported backends can use TLS, and Oracle Native Network Encryption is supported.checked 30 Sep 2026