Database security suite providing field-level encryption, SQL injection prevention, and intrusion detection for sensitive data.
Acra is a database security suite that provides field-level encryption, SQL injection prevention, and intrusion detection for protecting sensitive data in applications. It encrypts data at the application level before it reaches the database, supports searchable encryption, and includes a configurable SQL firewall to block malicious queries. Acra helps organizations secure personal and regulated data while maintaining compliance with standards like GDPR and HIPAA.
Developers and DevOps teams building web, mobile, or IoT applications that handle sensitive data (e.g., healthcare, fintech, SaaS). It is suited for organizations needing robust database security without major application rewrites.
Acra offers a unified suite of security controls—encryption, firewall, intrusion detection—that are easy to integrate via proxy or API. Its defense-in-depth design and minimal code changes reduce risk and operational overhead compared to piecing together separate security tools.
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Combines field-level encryption, SQL firewall, and intrusion detection in one tool, reducing the need for multiple security solutions and simplifying compliance efforts.
Enables exact-match queries on encrypted data using AES-GCM and blind indexes, maintaining usability while securing sensitive fields without full decryption.
AcraServer acts as a transparent SQL proxy, allowing integration by simply redirecting database connections, as demonstrated in the example dataflows.
Layers independent controls like encryption, poison records for intrusion detection, and SQL firewalls to mitigate multiple risks, following a robust security philosophy.
Critical features like KMS integration, key rotation without data re-encryption, and client-side SDKs are only available in the paid Enterprise edition, limiting the open-source version's utility.
Server-side components like AcraServer and AcraTranslator do not run natively on Windows, requiring Docker or Linux environments, which can hinder deployment in some infrastructures.
Setup involves configuring multiple services (e.g., AcraServer, key storage) and ensuring proper isolation, adding DevOps complexity compared to simpler encryption tools.