Skip to content

Release Notes — 1.0.0

Software Version: 1.0.0

Publication Date: July 2026

What's New

This is the first release of DDM (Dynamic Data Masking). DDM is a SQL proxy that sits between client applications and databases, and masks sensitive data in query results at query time.

  • Transparent proxy: Client applications connect to the DDM proxy port instead of the database. Database connections are defined on the Databases page, and JDBC connections on the Data Sources page. Connections can be secured with TLS/SSL by using client certificates.
  • Column-level masking: Masking rules link a column to a masking method. Masking rules are collected in masking groups.
  • Protocol-specific masking methods: Masking methods are SQL expressions defined for each database access protocol, such as STAR ALL, EMAIL, and HASH.
  • SQL access policies: Policies allow (WHITE) or block (BLACK) SQL statements that match a pattern or regular expression. Policies are collected in policy groups.
  • User-based masking and policies: Masking and policies are applied based on the authenticated database user. Database users are collected in user groups, and masking groups and policy groups are assigned to user groups.
  • Quick Assignment and Assignments: Relationships between databases, user groups, users, masking groups, and policy groups are managed from a single screen or from separate tabs. Current relationships can be reviewed on the Views page.
  • Discovery integration: Sensitive data classifications are imported from a supported discovery solution, and masking methods are applied automatically for each detected data type.
  • Logs: Connection sessions made through the proxy, SQL statements with their masking and policy results, and actions in the management interface are logged.
  • Approval workflows: BPMN workflows can be designed, deployed, scheduled, and tracked from the management interface.
  • Access management: Application users and roles control access to the pages and actions of the management interface.
  • Supported databases: Oracle (TNS), Microsoft SQL Server, MySQL, PostgreSQL, SAP HANA, Teradata, Cassandra, MongoDB, Couchbase, and IBM DB2 (including z/OS). See Supported Databases.
  • System parameters: Core, proxy, and integration settings are managed from the interface.

Performance

On PostgreSQL, the DDM proxy adds about 12 ms per query, regardless of result size; masking itself adds about 0–3 ms. See Performance for details.