Oracle Data Safe

Cloud-first adoption is accelerating as organizations pursue scalability, flexibility, predictable costs, faster time-to-market, and relief from maintaining on-premises infrastructure—an effect amplified by pandemic-driven remote work. At the same time, shifting deployment patterns and workforce realignment have increased security complexity, while data breaches, cyberattacks, and costly compliance regimes (e.g., PCI DSS, CPRA, GDPR) have raised the stakes for protecting sensitive data. The result is hybrid and multi-cloud becoming the norm, but with significantly higher effort required to locate, classify, and govern sensitive information across incompatible environments. This has fueled interest in consuming security capabilities from the cloud via a unified “security cloud” control center that improves visibility, simplifies analytics and reporting, and helps detect changes that can lead to compliance violations.

Despite adoption of cloud-delivered endpoint security (EDR) and network access (SASE), many organizations remain cautious about cloud-delivered data protection due to data sovereignty concerns, third-party risk, and the complexity of fragmented tool suites. Oracle positions itself as uniquely capable here, combining long-standing database security experience with cloud controls built into Oracle Cloud Infrastructure and consistent hybrid architecture enabled by a single multi-model database platform.

Oracle Data Safe is presented as a cloud-based, unified control center for Oracle database protection, governance, and compliance. It supports data discovery/classification, masking, database security assessment, user risk assessment, and centralized audit policy management and reporting. The service is globally available across Oracle Cloud regions to support sovereignty needs, expanded in October 2020 to cover any Oracle database (on-premises, Cloud@Customer, OCI, AWS, Azure), and offers simple enablement for OCI DBaaS customers. Strengths include centralized oversight, feature parity across deployments, secure connectivity options, and strong reporting; challenges include Oracle-only coverage, limited AI/ML in classification, and a need for more executive KPI reporting.

• Cloud adoption has been ongoing for over a decade and was boosted further by the global pandemic.
• Regulatory frameworks cited include PCI DSS, CPRA, and GDPR.
• Oracle Data Safe is a cloud-based service for data protection, governance, and compliance for Oracle databases.
• Oracle Data Safe is globally available in every Oracle Cloud region.
• In October 2020, Oracle Data Safe expanded to connect to any Oracle database, including on-premises, Cloud@Customer, OCI, AWS, and Azure deployments.
• Oracle DBaaS customers in Oracle Cloud can activate Data Safe with a single mouse click.
• Enrolling external databases can use VPN Connect, FastConnect, or an Oracle Data Safe On-Premises Connector that creates an encrypted outgoing connection.
• Data Safe scans for over 140 types of sensitive information and supports custom types using regular expressions.
• Data Safe provides over 50 predefined masking formats for common sensitive data types.
• For the third year in a row, Oracle was recognized as the overall leader in the latest edition of KuppingerCole’s Leadership Compass on Database and Big Data Security.

• “A unified management console that replaces numerous disconnected security tools helps address an even more crucial problem: the general lack of full visibility across environments”
• “the trend of consuming security tools delivered from the cloud is gaining popularity in recent years”
• “customers expect the convenience of a SaaS service but at the same level of assurance as traditional enterprise on-premises products”
• “Data Safe serves as a unified control center that allows customers to monitor and manage existing security capabilities of the Oracle Database”
• “their configuration can drift from the baseline, exposing the database to various attacks whether from insiders or outsiders”
• “The principle of least privilege is a common approach towards data protection, but only customers themselves can make an informed decision”
• “the initial release does not provide any automated mitigations against these users, focusing more on reporting capabilities”
• “Although the classification engine is driven by regular expressions and lacks the sophistication of specialized AI/ML-based solutions, the results are comprehensive and the performance impact on the database is minimal”
• “Extensive reporting capabilities allow users to access the collected audit data for all database targets”
• “Now, Data Safe can be recommended as an essential security service to every Oracle DBA without further reservations.”