Skip to content
SPECIFICTION
Get listed

DSGuard

ds-guard.com

Free plan Self-hosted
Visit ds-guard.com
Spec score 7.6 #9 of 26 in Database Security Software

What it is

DSGuard is a self-hosted gateway that controls and audits database access between applications and databases. It applies identity-aware access rules, policies and dynamic masking, and lists PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, MariaDB through the MySQL-compatible wire protocol, MongoDB and ClickHouse. Controls include TOTP MFA, IP restrictions, role- and object-level permissions, SQL injection protection, dangerous-function blocking and rate limits. Data safeguards include full, partial and hash masking, column-level controls, response leak detection, result limits and query-result truncation. Query logs record identities, decisions and block reasons; Database Activity Monitoring adds native database audit, including activity that bypasses the gateway. Integrations include Prometheus metrics, Grafana dashboards and centralized logs for a SIEM. The site describes deployment on premises, in private or public cloud, or in hybrid environments, and lists AWS, Azure and GCP compatibility. The free Community edition is self-managed and has no support entitlement; Professional and Enterprise plans have annual terms, with prices not listed.

Spec sheet

Product
DSGuard is an inline database security gateway that applies identity-aware access control, policy enforcement, dynamic masking and query-level audit between applications and databases.Read 30 Sep 2026 · ds-guard.com
Intended users
The site says DSGuard is built to secure critical database infrastructure for regulated companies, including banking and finance, insurance, fintech platforms, data-intensive systems and high-volume databases.Read 30 Sep 2026 · ds-guard.com
Deployment
DSGuard can be deployed on-premises, in private or public cloud, or in hybrid environments; the site names AWS, Azure and GCP compatibility for public cloud.Read 30 Sep 2026 · ds-guard.com
Integrations
The site lists a Prometheus metrics endpoint, provisioned Grafana dashboards and centralized query and application logs for a SIEM.Read 30 Sep 2026 · ds-guard.com
Compliance
The site describes technical controls and audit evidence supporting PCI DSS, ISO 27001, SOX, HIPAA, GDPR and KVKK, and says DSGuard is not itself a certification.Read 30 Sep 2026 · ds-guard.com
Support
Professional includes business-hours support Monday to Friday, 09:00–18:00 (GMT+4); Enterprise includes 24×7 support with a 4-hour response target; Community has no support entitlement.Read 30 Sep 2026 · ds-guard.com
Access and threat controls
Listed controls include TOTP MFA, IP-based access control, role- and object-level permissions, SQL injection protection, dangerous-function blocking and rate limiting.Read 30 Sep 2026 · ds-guard.com
AI sandbox shell
The AI sandbox shell offers command rules, output masking, per-domain egress controls, Landlock-based filesystem allowlists, live session controls and audit logging.Read 30 Sep 2026 · ds-guard.com
Audit
The gateway logs queries with identity, decisions and block reasons; Database Activity Monitoring adds native database audit, including access that bypasses the gateway.Read 30 Sep 2026 · ds-guard.com
Community edition limit
Community is self-installed and self-managed, with no expiry, feature gating or capacity cap; the site says it has no support entitlement.Read 30 Sep 2026 · ds-guard.com
Data protection
Features include full, partial and hash dynamic masking, column-level access control, response leak detection, result limits and query-result truncation.Read 30 Sep 2026 · ds-guard.com
Database coverage
The site lists PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, MariaDB through the MySQL-compatible wire protocol, MongoDB and ClickHouse.Read 30 Sep 2026 · ds-guard.com
Transport security
The site states that client connections use TLS on every engine, supported backends can use TLS, and Oracle Native Network Encryption is supported.Read 30 Sep 2026 · ds-guard.com

Plans and prices

Community Edition Free No licence · no registration Unlimited datasources · unlimited ShellAI users · all features · no time limit · no capacity limit · self-managed · no support entitlement Read 30 Sep 2026 · ds-guard.com
Enterprise Price not published Annual subscription · custom terms Everything in Professional · 24×7 support with a 4-hour response target · custom contract length, scope and invoicing Read 30 Sep 2026 · ds-guard.com
Professional Price not published Annual subscription Full software · engineer-led deployment · managed updates · business-hours support, Mon–Fri 09:00–18:00 (GMT+4) Read 30 Sep 2026 · ds-guard.com

Every DSGuard plan and price →

Strong points and limits

Strong points

  • Supports seven named database engines and protocols.
  • Combines access controls with dynamic masking and query auditing.
  • Native database audit can capture activity bypassing the gateway.
  • Deploys on premises, cloud or hybrid environments.
  • Free Community edition has no time or capacity limit.

Limits

  • Community includes no support entitlement.
  • Enterprise support has a four-hour response target, not a stated resolution time.

Who it suits

DSGuard is aimed at regulated companies and organizations with critical or high-volume databases, including banking, finance, insurance and fintech platforms. Community suits teams able to install and manage the software without included support.

Verdict

DSGuard combines database access governance, masking and auditing, with Community available at no license cost. Teams choosing that edition must self-manage and go without included support; paid plan pricing requires discussion with the maker.

Where Specifiction places it

Alternatives to DSGuardAll alternatives →