Skip to main content

Why KloudDB Shield?

Centralized Security Platform​

KloudDB Shield provides a centralized platform for continuously assessing PostgreSQL security, compliance, configuration, and access risks. It brings security checks, compliance reporting, PII discovery, configuration auditing, and operational security insights into a single dashboard.

1. 100+ Security Checks​

Continuously assess your PostgreSQL databases using 100+ security checks covering authentication, authorization, configuration, encryption, logging, auditing, backups, and other security best practices.

2. CIS Benchmarks​

Evaluate your PostgreSQL servers against industry-recognized CIS security recommendations.

3. PII Scanner​

Automatically discover Personally Identifiable Information (PII) stored across your PostgreSQL databases.

4. Backup Compliance Dashboards​

Get centralized visibility into PostgreSQL backup status and compliance across your database infrastructure.

Supports all 4 popular backup methods

  1. Pg_basebackup
  2. Pg_dump
  3. Pg_dumpall
  4. Pgbackrest

5. GUC Drift Detection​

Detect PostgreSQL configuration changes by comparing server GUC parameters against an approved baseline.

6. PCI Compliance​

Assess PostgreSQL environments against database security controls relevant to PCI compliance.

7. DPDPA Compliance​

Identify PostgreSQL security and data-protection risks relevant to India's Digital Personal Data Protection Act (DPDPA).

8. Inactive Users Report​

Identify PostgreSQL users that have not shown database activity during a selected period. This helps administrators review dormant accounts and determine whether unnecessary access should be disabled or removed, reducing the risk associated with stale user accounts.

9. Client IP Scanner​

Discover the client IP addresses connecting to your PostgreSQL databases and associate connection activity with database users. This helps security teams identify unexpected connection sources, investigate access patterns, and detect potentially unauthorized access.

10. Common Users Report​

Identify commonly used, generic, or potentially risky PostgreSQL usernames across your database environment. The report helps administrators detect shared or predictable accounts that may weaken accountability and increase security risk.

11. SSL Scanner​

KloudDB Shield identifies insecure or potentially weak SSL configurations and helps teams improve encryption for data in transit.

12. Unused HBA Lines​

Identify PostgreSQL pg_hba.conf rules that appear to be unused based on observed database connection activity. Reviewing unnecessary HBA entries helps reduce the attack surface and keeps database access policies clean, intentional, and easier to audit.

13. Configuration Audits​

Audit important PostgreSQL configuration parameters for security and operational risks. KloudDB Shield highlights potentially unsafe settings and configuration deviations, giving administrators a centralized view of configurations that may require attention.

14. Elevated Privileges Report​

Identify PostgreSQL users and roles with elevated or sensitive privileges, including powerful administrative permissions. This report helps organizations review privileged access, enforce least-privilege principles, and detect accounts that may have more permissions than necessary.