At a glance
| Supported databases | Wide: major relational engines, AWS data services, Snowflake, BigQuery, MongoDB, Cassandra and more |
| Auditing and activity monitoring | Yes, in proxy, sniffer, audit-log trailing and agent modes |
| Masking | Dynamic (proxy mode) and static |
| Encryption or tokenization | Not documented as a core feature on the pages checked |
| Privileged access | Monitoring and firewall rules on privileged sessions; not a password vault |
| Policy enforcement | Database firewall rules, proxy mode only |
| Compliance reporting | GDPR, HIPAA, SOX and CCPA reporting |
| Deployment | Self-hosted on Windows, Linux, Docker or Kubernetes; AWS, Azure and Google Cloud marketplaces |
| Licensing | Commercial; AWS hourly listing US$1.40 per protected database instance per hour |
DataSunrise suits teams that want audit, firewall and dynamic masking for many database engines from one product they run themselves, including on AWS with metered billing. Choose the deployment mode carefully: the full feature set needs proxy mode, which adds a network hop and requires blocking direct database access.
Overview
DataSunrise Database and Data Security is a commercial security suite from DataSunrise, Inc. It covers database activity monitoring and audit, a database firewall, dynamic and static data masking, sensitive data discovery, vulnerability assessment and compliance reporting for regulations such as GDPR, HIPAA, SOX and CCPA. Coverage runs from relational engines and data warehouses to NoSQL stores, vector stores and object storage.
The product runs on Windows or Linux, in Docker or Kubernetes, or from the AWS, Azure and Google Cloud marketplaces. DataSunrise documents four deployment modes: proxy (full features including firewall and masking), sniffer (passive audit of mirrored traffic, no firewall or masking, and no analysis of SSL-encrypted traffic), trailing the database's native audit logs, and an agent that also captures local connections.
Key features
- Database activity monitoring and audit with SIEM integration
- Database firewall rules that can block queries in proxy mode
- Dynamic and static data masking, role-based and location-aware
- Sensitive data discovery across databases, warehouses and files
- Vulnerability assessment of known vulnerabilities and misconfigurations
- Compliance reporting for GDPR, HIPAA, SOX, CCPA and similar regulations
- Four deployment modes: proxy, sniffer, native audit log trailing and agent
Integrations and ecosystem
Pros and cons
Pros
- One product combines audit, firewall, masking and discovery
- Published metered price on AWS Marketplace
- Runs on Windows, Linux, containers and all three major cloud marketplaces
- Choice of proxy, sniffer, log-trailing and agent modes to fit network constraints
Cons
- Firewall and dynamic masking need proxy mode, which adds a network layer and cannot see local connections
- Sniffer mode cannot analyse SSL-encrypted traffic
- Pricing outside AWS Marketplace is by quote
Pricing
DataSunrise does not publish prices on its own site (contact sales or book a demo). Its AWS Marketplace listing "DataSunrise Database and Data Security w/ Hourly Billing" charges US$1.40 per protected database instance per hour, plus the EC2 infrastructure it runs on, with no end date and cancellation at any time; the listing mentions a 30-day trial. Separate BYOL and annual or hourly marketplace listings exist. A free trial download is offered on datasunrise.com.
Pricing checked on the vendor's official page on 7 November 2026. Prices change; confirm before buying.
Who it is best for
Security and DBA teams that want audit, firewall and dynamic masking across several database engines in a product they deploy and run themselves.
Typical use cases
- Auditing access to production databases for GDPR, HIPAA or SOX evidence
- Masking personal data for support staff or analysts without changing applications
- Blocking unauthorised or injection-style queries in front of a database
- Discovering where personal data sits across databases and cloud storage
Who should look elsewhere
- Oracle-centred estates that want an Oracle-supported audit and firewall appliance: see Oracle Audit Vault and Database Firewall.
Verdict
DataSunrise packs audit, firewall, masking and discovery into one self-hosted product with unusually wide engine coverage and a published AWS hourly rate. Its full value depends on running it as a proxy in the data path, so weigh the network change against the controls you gain.
Frequently asked questions
How much does DataSunrise cost?
On AWS Marketplace the hourly listing charges US$1.40 per protected database instance per hour plus EC2 costs. Other purchases, such as BYOL licences, are priced by DataSunrise sales.
Which DataSunrise mode do I need for masking and blocking?
Proxy mode. DataSunrise documents that proxy mode enables the full feature set, while sniffer mode is passive audit only and cannot analyse SSL-encrypted traffic.
Can DataSunrise audit local connections on the database server?
Not in proxy mode. DataSunrise states that native audit log trailing and agent mode can capture local connections.
Sources
- DataSunrise home page
- DataSunrise deployment modes
- DataSunrise download page (platforms)
- AWS Marketplace: DataSunrise with hourly billing
Checked November 2026.
Listed in: Database Security & Auditing.
How we research reviews and what star ratings mean: our editorial method.