Oracle Data Safe empowers organizations to understand data sensitivity, evaluate data risks, mask sensitive data, implement and monitor security controls, assess user security, monitor user activity, and manage Oracle AI Database SQL Firewall—all in a single, unified console.

These capabilities help to manage the day-to-day security and compliance requirements of Oracle databases, both on-premises and in the cloud.

Security assessment

Quickly evaluate database security posture by identifying, categorizing, and prioritizing risks. Get comprehensive reports on configuration parameters, security controls, user roles, and privileges. Maintain baselines, detect drift, and enforce consistent controls fleet-wide with actionable recommendations mapped to GDPR, DISA STIGs, and CIS benchmarks.

User assessment

Identify highly privileged accounts that pose threats if misused or compromised. Data Safe calculates risk scores for each user based on user types, authentication methods, password policies, and password change frequency. Review privileges and activity through direct links to audit records, then deploy appropriate security controls based on risk insights.

Activity auditing

Collect audit data from databases and identify anomalous operations. Manage audit and alert policies using out-of-box or custom reports to analyze database activity. Retain audit data up to 7 years for compliance and forensic investigation.

Sensitive data discovery

Discover and classify sensitive data using 150+ predefined types, extendable with custom types. Built-in sensitive types cover personal identifiers, biographic, IT, financial, healthcare, academic, and employment data. Gain clear insight into the type, location, and volume of sensitive data to assess risk and determine protection needs.

Data masking

Mask sensitive data using prebuilt formats and extend using custom rules. Preserves referential integrity so your applications run on masked data. Build masking policies from discovered data, run scheduled jobs, and generate audit reports.

SQL Firewall management

SQL Firewall in Oracle AI Database 26ai learns normal application behavior—tracking SQL statements, network addresses, OS users, and programs. Centrally manage policies and monitor violations with alerts and reports.

Security policies

Alerts and notifications

Define policies to alert on risky events including privileged actions, failed logins, and configuration drift. Route notifications to operations teams for immediate response.

Multicloud and on-premises database support

Supports registering databases across Autonomous AI Database, Exadata Cloud Service, Base Database Service, Oracle Database@Azure, Oracle Database@Google Cloud, Oracle Database@AWS, Amazon RDS for Oracle, Cloud@Customer, and on-premises databases including Enterprise Edition and Standard Edition for centralized governance.

APIs and automation

Comprehensive REST APIs, OCI CLI, and SDKs (Java, Python, Go, .NET, Ruby, TypeScript/JavaScript) automate onboarding, assessments, auditing, discovery/masking, and reporting. Integrate with DevOps and SecOps workflows using Terraform via the OCI Provider for infrastructure-as-code deployments.

—Guillaume Delannoy, CEO, Soho Media Solutions