Block Risky Access, Mask Sensitive Data, and Protect Data Copies
Apply firewall, masking, encryption, and Generative AI controls through methods matched to the source and data state.
Protection family
DataSunrise protects data while it is queried, copied, stored, and sent to Generative AI services. Teams can choose the control that matches the data state and the outcome they need.
Controls range from stopping risky live requests to creating protected copies for development, testing, and analytics.
Protection workflow
DataSunrise protects live traffic, sensitive results, non-production copies, and Generative AI interactions.
Product evidence
Product screens show how policy, evidence, and protection appear in practice.
Protection workflows
The DataSunrise Database Firewall evaluates requests through an inline proxy before they are executed. Rules can use the database user, configured application user, source, object, operation, time, and other session context to allow, block, or handle the request.
Dynamic Data Masking uses the same active path to change sensitive values in query results while the stored data remains unchanged.
Static Data Masking applies configured masking methods in batch tasks and writes a de-identified target for development, testing, analytics, or approved data sharing.
Test Data Management combines Static Data Masking with Synthetic Data Generation, so teams can prepare useful non-production datasets without relying only on clear production data.
PostgreSQL Encryption at Rest is a licensed workflow for selected columns or complete tables. It uses PostgreSQL pgcrypto and AES-128 with DataSunrise proxy query rewriting and managed key exchange.
Keys can be stored internally or through CyberArk and AWS KMS. Authorized applications receive clear values through the managed proxy path.
Generative AI Data Masking and Prompt Controls use Information Types to mask sensitive prompt or response fields and block risky prompts across OpenAI, ChatGPT, Claude, Bedrock, Azure AI, and Gemini.
Salesforce Dynamic Data Masking protects sensitive values in Salesforce responses while the source record remains unchanged.
No. Passive monitoring records activity without changing it. To block a request or mask a live result, traffic must pass through DataSunrise.
No. It changes the result shown to the user while the stored value remains unchanged. Static Data Masking, on the other hand, creates a de-identified copy.
It supports PostgreSQL and Amazon Aurora PostgreSQL.
Map the right workflow
