SQL Activity Analysis
Parse and analyse SQL statements with user, application, source, object, execution time, result and session context to investigate suspicious, failed or heavy queries.
← All solutions
Database Security & Compliance
DataSunrise
See, control and protect sensitive data.
DataSunrise provides SQL query analysis, database activity monitoring, sensitive-data discovery, database firewall, dynamic and static masking, vulnerability assessment and compliance reporting across cloud and on-premises data platforms.
The business challenge
Why organisations consider this solution.
Critical data is accessed through millions of SQL operations from users, applications and administrators. Organisations need query-level visibility, historical analysis and consistent controls across different database technologies without redesigning every application.
Core capabilities
What DataSunrise
helps you do.
Activity Monitoring & Audit
Build searchable query and session history across application and privileged users, correlate behaviour over time and preserve independent audit evidence.
Database Firewall
Inspect SQL traffic and enforce granular rules to alert on or block unauthorised queries, SQL injection and access-policy violations.
Discovery, Masking & Compliance
Locate sensitive information, protect values through dynamic or static masking and automate evidence for applicable regulatory requirements.
Reference architecture
See the actual
solution topology.
Parse and analyse SQL activity across databases and cloud sources, investigate query behaviour, enforce security policy in real time and preserve evidence for operations and compliance. The diagram below shows the product's distinct operating model, data paths and enforcement or decision points.
Illustrative reference architecture — final design depends on the customer environment and vendor-supported integration pattern.
Example use cases
Apply the architecture
to a real scenario.
These examples explain the business purpose behind the architecture. Final scope, integrations and outcomes depend on your environment and implementation design.
01SQL investigation
Analyse a suspicious or heavy query
A production service slows down while an unusual statement reads a large volume of customer data.
- 1Capture query text, user, source, objects, result and runtime
- 2Correlate the statement with its session and historical behaviour
- 3Filter, investigate and export the complete evidence trail
Expected resultOperations and security teams can explain who ran the SQL, what it touched, how it behaved and whether action is required.
02Database security
Block a SQL injection attempt
A compromised application sends an abnormal query pattern toward a production database.
- 1Inspect and parse incoming SQL traffic
- 2Match risk policy and query behaviour
- 3Block the query and record the event
Expected resultThe attack is stopped at the data layer without changing application code.
03Development and UAT
Mask a production database copy
Test teams need realistic data but must not receive real customer identities or payment details.
- 1Discover sensitive fields
- 2Apply consistent static masking
- 3Deliver a protected test copy
Expected resultDevelopers keep realistic relationships without exposing production identities.
Delivery path
From requirement
to production value.
The exact architecture depends on your environment, but the solution typically follows this practical operating flow.
Connect data sources
Register cloud or on-premises databases and select the appropriate traffic, audit or integration mode for each environment.
Capture and analyse SQL
Parse query text and enrich it with user, source, application, accessed objects, execution outcome, timing and session context.
Investigate and enforce
Search query history, compare behaviour and configure audit or firewall rules to alert on or block policy violations.
Protect and report
Discover sensitive data, apply masking where required and produce central evidence for security, operations and compliance teams.
Typical use cases
Where it fits.
- SQL query and database activity analysis
- Privileged user and DBA investigation
- Database firewall and SQL injection defence
- Discovery, masking and compliance reporting
Expected outcomes
What success looks like.
- Searchable query-level activity history
- Faster SQL and session investigation
- Real-time prevention at the data layer
- Consistent controls across heterogeneous databases
DLAB's role
Technology is only valuable
when it works in your environment.
DLAB helps customers evaluate the fit, define use cases, coordinate solution demonstrations and proofs of concept, plan deployment with the principal and local partners, and establish the support path for production.
Arrange a solution workshop