DSGuard vs Kron Database Access Manager

DSGuard is a self-hosted gateway that controls and audits database access between applications and databases. It applies identity-aware access rules, policies and dynamic masking, and lists PostgreSQL, Oracle Database, Microsoft SQL Server, MySQL, MariaDB through the MySQL-compatible wire protocol, MongoDB and ClickHouse. Controls include TOTP MFA, IP restrictions, role- and object-level permissions, SQL injection protection, dangerous-function blocking and rate limits. Data safeguards include full, partial and hash masking, column-level controls, response leak detection, result limits and query-result truncation. Query logs record identities, decisions and block reasons; Database Activity Monitoring adds native database audit, including activity that bypasses the gateway. Integrations include Prometheus metrics, Grafana dashboards and centralized logs for a SIEM. The site describes deployment on premises, in private or public cloud, or in hybrid environments, and lists AWS, Azure and GCP compatibility. The free Community edition is self-managed and has no support entitlement; Professional and Enterprise plans have annual terms, with prices not listed.

Kron Database Access Manager is a paid, hybrid database security product that centralizes access control, query policy enforcement, activity monitoring, and audit reporting. Its SQL Proxy routes database queries through a control point that captures activity and applies rules while allowing users to keep their existing database clients and standard protocols. Administrators can restrict sensitive data access, discover items such as credit-card and personal-ID numbers, and apply dynamic masking to filtered results. Listed database platforms include Oracle, MSSQL, MySQL, PostgreSQL, Couchbase, Teradata, Cassandra, SAP HANA, and Hive; MongoDB support was added to the SQL Proxy in Kron PAM 3.9. SSO and MFA through the Kron JDBC Driver are listed for MySQL, PostgreSQL, Oracle, and Microsoft SQL Server. Session and query logging support compliance needs, and persistent logging failure causes the proxy to stop accepting new connections. Kron was founded in 2007 and is headquartered in Istanbul, Turkey. Pricing is available on request, and multitenant features require a Data Access Management license.