Databunker
A self-hosted, GDPR-compliant Go tool for secure tokenization and encrypted storage of PII, PHI, PCI, and KYC records.
What is Databunker?
Databunker is a self-hosted, open-source secure vault for tokenizing and storing sensitive personal data such as PII, PHI, PCI, and KYC records. It provides API-level encryption, prevents SQL and GraphQL injection attacks, and ensures all data is encrypted at rest, addressing gaps in traditional database security. The tool helps organizations comply with regulations like GDPR, HIPAA, and CCPA while simplifying secure data management.
Developers and organizations handling sensitive customer data, particularly in healthcare, finance, and identity management sectors, who need robust, compliant storage solutions. It's ideal for teams requiring secure tokenization, injection protection, and GDPR-ready tools.
Databunker offers a practical, developer-friendly alternative to traditional encryption by focusing on API-level security and eliminating vulnerabilities like SQL injection. Its self-hosted nature, GDPR compliance out of the box, and fast integration make it a unique choice for secure, compliant data storage without relying on external vendors.
Overview
Secure Vault for Customer PII/PHI/PCI/KYC Records
Use Cases
Best For
- Securing user profile data with tokenization in web applications
- Storing healthcare patient records in a HIPAA-compliant manner
- Managing financial customer data for PCI DSS compliance
- Implementing GDPR-compliant consent management and audit trails
- Preventing SQL and GraphQL injection attacks on sensitive data
- Building secure identity management and session storage systems
Not Ideal For
- Organizations preferring fully managed, cloud-based data vaults without self-hosting responsibilities
- Applications requiring complex, ad-hoc SQL joins or analytical queries across integrated datasets
- Teams with limited DevOps resources for maintaining and scaling a self-hosted Go application
- Projects where data must reside in specific geographic regions with minimal configuration effort
Pros & Cons
Pros
Generates UUID tokens to safely reference sensitive data in applications, eliminating direct exposure as highlighted in the tokenization feature.
Blocks SQL and GraphQL injection attacks by using a secure API layer, directly addressing vulnerabilities mentioned in the traditional encryption problem.
Includes built-in tools for GDPR, HIPAA, and CCPA compliance such as consent management and audit trails, simplifying regulatory adherence.
Powered by Go, it ensures fast tokenization and data access, suitable for high-throughput environments as noted in the key features.
Cons
Advanced functionalities like credit-card tokenization are reserved for the paid Pro version, limiting the open-source edition's utility.
Requires setup and maintenance of Docker containers and external databases (MySQL/PostgreSQL), adding operational complexity beyond managed solutions.
Designed for secure storage with hash-based indexing, not for complex analytical or relational queries, which can hinder data exploration needs.
Frequently Asked Questions
Related Projects
AcraDatabase security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
InspektorInspektor is a protocol-aware proxy that is used to enforce access policies👮
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.