It shouldn't be hard to
secure your data

Increase the security, reliability and performance of your database with a single tool.

>_ Terminal

docker run -p 6432:6432 \
 -e CS_DATABASE__NAME=postgres \
 -e CS_DATABASE__HOST=172.17.0.1 \
 -e CS_DATABASE__USERNAME=admin \
 -e CS_DATABASE__PASSWORD=pw \
 cipherstash/cipherstash-proxy

Works wherever you run Postgres

If you could massively improve data security in under an hour, wouldn't you?

Proxy is free to use, and you can add modules as you need them.

Easy to deploy

Deploy the CipherStash Proxy Docker container, and connect to your existing database.

Maintain functionality

CipherStash Proxy uses the PostgreSQL wire protocol, so your applications and clients don't need to change.

Advanced proxy for your database

Built on an open-source core, CipherStash Proxy supports client authentication via OAuth2, load balancing, sharding, and connection pooling.

Query and data access auditing

Log every query and statement, and every sensitive data access. Configure which columns and tables to audit to meet your compliance requirements.

Modern authentication and access control

Use OpenID to authenticate clients, and federate identity from applications. Record exactly who accessed the database and what they did.

Searchable encryption in-use

The data stays encrypted even when in use. Choose what tables and columns to encrypt without affecting functionality or performance.

Security and visibility. À la carte.

CipherStash is a suite of tools that can be used together or independently to secure and audit your data.

Detailed yet storage efficient data-access events record the row ID and column name of every query result. Integrate these events with your existing log management tools or ship them to CipherStash for analysis.

Use your existing identity provider to enrich data access events with user and role information. This allows you to answer questions like 'who accessed data?' and 'what data did they access?'

Traditionally, databases expose data in plain text even when using encryption at-rest, risking leaks due to compromised credentials or untrusted clients. Your data is encrypted and searchable, even when in use and is only decrypted when accessed by authorized users.

>_ psql

$ SELECT * FROM users LIMIT 3; 

StatementCompleteLog { id: 99c10cf0-9985-43a9-8b5b-bc62654c0c3e, workspace_id: "local", statement_id: 2d0c1952-fa4e-4f03-93eb-9784eb36c495, statement_duration_ms: 43, statement_error: None, rows_returned_count: 3 } 

DataAccessLog { id: 2be2e5f7-0a75-4ae4-b1f0-c49b7ba2817b, workspace_id: "local", statement_id: 2d0c1952-fa4e-4f03-93eb-9784eb36c495, rows_accessed: {"users": {"1", "2", "4"}}, columns_accessed: [["users.email"], ["users.id"], ["users.name"]] }