Manage Database Security with Oracle Data Safe

Oracle Data Safe, which is included with the Base Database Service, provides a unified control center that helps you manage the day-to-day security and compliance requirements of Oracle Databases.

About Oracle Data Safe

Your corporate policy requires that you monitor your databases and retain audit records. Your developers are asking for copies of production data for that new application, and you’re wondering what kinds of sensitive information it will contain. Meanwhile, you need to make sure that recent maintenance activities haven’t left critical security configuration gaps on your production databases and that staff changes haven’t left dormant user accounts on the databases. Oracle Data Safe assists you with these tasks and is included with your Base Database Service.

Data Safe supports you to evaluate security controls, assess user security, monitor user activity, and address data security compliance requirements for your database by evaluating the sensitivity of your data as well as masking sensitive data for non-production databases.

Data Safe provides the following features:

• Security Assessment: Configuration errors and configuration drift are significant contributors to data breaches. Use security assessment to evaluate your database’s configuration and compare it to Oracle and industry best practices. Security assessment reports on areas of risk and notifies you when configurations change.
• User Assessment: Many breaches start with a compromised user account. User Assessment helps you spot the riskiest database accounts- those accounts which, if compromised, could cause the most damage - and take proactive steps to secure them. User Assessment Baselines make it easy to know when new accounts are added, or an account’s privileges are modified. Use OCI events to receive proactive notifications when a database deviates from its baseline.
• Sensitive Data Discovery: Knowing what sensitive data is managed in your applications is critical for security and privacy. Data discovery scans your database for over 180 different types of sensitive data, helping you understand what types and how much sensitive data you are storing. Use these reports to formulate audit policies, develop data masking templates, and create effective access control policies.
• Data Masking: Minimizing the amount of sensitive data your organization maintains helps you meet compliance requirements and satisfy data privacy regulations. Data masking helps you remove risk from your non-production databases by replacing sensitive information with masked data. With reusable masking templates, over 50 included masking formats, and the ability to easily create custom formats for your organization’s unique requirements, data masking can streamline your application development and testing operations.
• Activity Auditing: Understanding and reporting on user activity, data access, and changes to database structures supports regulatory compliance requirements and can aid in post-incident investigations. Activity auditing collects audit records from databases and helps you manage audit policies. Audit insights make it simple to identify inefficient audit policies, while alerts based on audit data proactively notify you of risky activity.
• SQL Firewall Management: Protect against risks such as SQL injection attacks or compromised accounts. Oracle SQL Firewall is a new security capability built into the Oracle AI Database 26ai kernel and offers best-in-class protection against these risks. The SQL Firewall feature in Oracle Data Safe lets you centrally manage and monitor the SQL Firewall policies for your target databases. Data Safe lets you collect authorized SQL activities of a database user, generate and enable the policy with allowlists of approved SQL statements and database connection paths, and provides a comprehensive view of any SQL Firewall violations across the fleet of your target databases.

Get Started with Oracle Data Safe

For more information about using Oracle Data Safe, see Administering Oracle Data Safe.