CipherStashProxy by CipherStash is a data protection gateway for PostgreSQL databases that provides encryption, auditing, and fine-grained access control. It acts as a proxy between applications and PostgreSQL databases, ensuring data remains encrypted even when in use. CipherStashProxy is built on the pgcat connection pooler and is designed to be a drop-in replacement for existing PostgreSQL connections. It logs every statement and the ID of every record queried, enabling detailed auditing and monitoring. CipherStashProxy supports searchable encryption, allowing data to be encrypted and still searchable. It integrates with identity providers to enrich data access events with user and role information. The proxy can be deployed in various environments, including Docker, Kubernetes, AWS ECS, and GCP Cloud Run, and supports Zero Trust key management with ZeroKMS. CipherStashProxy is written in Rust, making it fast and efficient, and includes built-in data integrity protection using cryptographic tags.
