DSGuard vs Greenmask

DSGuard is a self-hosted gateway that controls and audits database access between applications and databases. It applies identity-aware access rules, policies and dynamic masking, and lists PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, MariaDB through the MySQL-compatible wire protocol, MongoDB and ClickHouse. Controls include TOTP MFA, IP restrictions, role- and object-level permissions, SQL injection protection, dangerous-function blocking and rate limits. Data safeguards include full, partial and hash masking, column-level controls, response leak detection, result limits and query-result truncation. Query logs record identities, decisions and block reasons; Database Activity Monitoring adds native database audit, including activity that bypasses the gateway. Integrations include Prometheus metrics, Grafana dashboards and centralized logs for a SIEM. The site describes deployment on premises, in private or public cloud, or in hybrid environments, and lists AWS, Azure and GCP compatibility. The free Community edition is self-managed and has no support entitlement; Professional and Enterprise plans have annual terms, with prices not listed.

Greenmask is a free, open-source utility for logical database backups, anonymization, synthetic data generation, and restoration. It currently supports PostgreSQL, with MySQL, MongoDB, and other database support in development. Transformations can be deterministic or random, use dynamic parameters, mask data, or apply custom rules based on domains. Configuration validation can show warnings and data or schema differences, and transformation settings can be inherited across partitions of partitioned tables. Greenmask stores backups in local directories or S3-like remote storage. It supports parallel dumping and restoration, as well as parallel compression with pgzip. Its logical-dump approach does not require changes to the existing database schema, and dumps can be restored with pg_restore. CI/CD integration can automate anonymization and restoration. Greenmask runs on Linux and macOS and can be self-hosted on premises. Installation options include an install script, Docker, Homebrew, or building from source; the install script works on Linux and macOS, while Windows is not supported yet. A Docker Playground with sample databases provides a sandbox for trying the utility. The maker offers paid custom development for urgent or enterprise-specific feature requests.