v1.0.0
Book a demo →
Dataskope Suite · Module

Dynamic Data Masking

Real-Time Data Masking

Show the data.
Hide what matters.

Dynamic Data Masking masks sensitive data in real time for users who should not see it, without changing the original data. A SQL proxy applies your masking and query policies on the way through.

Book a demo→Read the docs
Masking rules list with schema, table, column, and method
Capabilities

Real-time masking.
Source data untouched.

Define what to mask, for whom, and which queries are allowed. Dynamic Data Masking enforces it on every query.

01

Masking in flight

Query results are masked as they pass through the SQL proxy. The data in your database stays exactly as it is.

SQL proxyNo data change
02

Masking methods and realms

Define masking methods, realms, and views, then assign them to the data and users that need them.

MethodsRealmsAssignments
03

Query policies

Whitelist and blacklist policies match SQL statements with regular expressions. Each policy carries a low, medium, or high risk type, and policies can be grouped.

WhitelistBlacklistPolicy groups
04

Masking from classification

Use classification results from Data Discovery to assign masking methods automatically, instead of configuring every column by hand.

Auto-assignClassification
05

Endpoint logs and sessions

See which policy was applied to which query and what the masking result was, per endpoint and session.

Endpoint logsSessions
06

Alarms and workflows

Alarms and notifications keep your team informed, and approval workflows add control over changes.

AlarmsNotificationsWorkflow
How it works

Every query, checked and masked.

Applications and users connect through the proxy port instead of directly to the database. The proxy checks each query and masks the result before it leaves.

1

Connect

Define the database and its proxy port. Clients connect through the proxy.

DatabaseProxy port
2

Check

Each SQL statement is matched against whitelist and blacklist policies.

PoliciesRisk type
3

Mask

Assigned masking methods are applied to the result set.

MethodsAssignments
4

Log

Endpoint logs and sessions record what was applied and when.

Endpoint logsSessions
Use case · Production access

Let teams work without seeing raw data.

Support, operations, and outsourced teams often need production access but not the personal data inside it. Masking policies let them do their job while sensitive values stay hidden.

  • Masking applied per user and data
  • No copies, no changes to source data
  • Masking methods assigned from classification
  • Every applied policy visible in endpoint logs
Masking methods with their patterns
Whitelist and blacklist query policies
Use case · Query control

Decide which queries are allowed.

Whitelist and blacklist policies with SQL pattern matching give you control over what reaches the database, with a risk type on every policy.

  • Regex-based SQL policies
  • Low, medium, and high risk types
  • Policy groups for easier management
  • Alarms and notifications
FAQ

Questions & answers.

Does Dynamic Data Masking change the data in my database?
No. Masking is applied to query results as they pass through the proxy. The original data is not changed.
How do applications connect?
Applications and users connect to the proxy port defined for the database instead of connecting to the database directly.
How does it know which columns to mask?
You can assign masking methods manually, or let classification results from Data Discovery assign them automatically.
Can I see what was masked?
Yes. Endpoint logs and sessions show which policy was applied to which query and the masking result.

Explore the other modules

Sensitive Data Discovery & Classification

Data Discovery

Scan databases and file shares, classify sensitive columns, and score every column for risk.

Database Audit & Alerting

Database Activity Monitoring

Detect, classify, alert on, and report the events in your database systems.

Database Activity Analytics

Data Security Posture Management

Turn database activity into access visibility, anomaly alerts, and scheduled access reports.

KVKK & GDPR Privacy Operations

Privacy Management

Run consents and data subject requests for KVKK and GDPR in one place, with deadlines tracked.

Masked & Synthetic Test Data

Test Data Management

Give development and QA teams masked or synthetic data, orchestrated as reusable scenarios.

See Dynamic Data Masking live.

Book a demo and watch the same query return masked and unmasked results for different users.

Book a demo→Read the docs

Book a demo

Tell us about your environment. We will walk you through the modules that fit it.

Which modules are you interested in? (optional)

Your details are processed in accordance with our Privacy Notice.

Thank you!

We received your request. Our team will get back to you shortly.