Ross ROSS = Recommend OSS · open-source software intelligence for agents

cossacklabs/acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL. observed · 2026-08-28

github.com/cossacklabs/acra · homepage · Go · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

58/100

  • Activity 78
  • Release rhythm 8
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3579
  • days_rel: 723
  • days_push: 133
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

1491 stars · 140 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Acra is a database security suite that provides field-level encryption, searchable encryption, tokenization, data masking, SQL firewalling, and intrusion detection for SQL and NoSQL databases. It deploys as a transparent SQL proxy (AcraServer), an encryption-as-a-service API (AcraTranslator), or in-app SDKs, and is built in Go.

Use cases

  • encrypt sensitive fields in postgres or mysql transparently
  • search over encrypted database columns
  • prevent sql injection and block unwanted database queries
  • detect database intrusion attempts and data leakage
  • tokenize and mask personal data for compliance
  • add client-side encryption to web and mobile apps
  • protect healthcare or fintech data at rest

When to choose

  • you need field-level or application-level encryption without rewriting your app
  • compliance requires encryption, masking, tokenization, and audit logging of sensitive data
  • you want a proxy-based transparent encryption layer in front of PostgreSQL or MySQL
  • you need searchable encryption or a SQL firewall with intrusion detection

When to avoid

  • your server environment is Windows (server components require Linux)
  • you need a lightweight library-only solution without running extra infrastructure
  • you rely on MySQL Protocol X or unsupported database protocols in the community edition
  • your stack uses databases not speaking the PostgreSQL or MySQL wire protocols

Facets

service · maturity active

cryptography database security caching logging monitoring search-engine security databases privacy backend healthcare fintech self-hosted cloud go python php ruby jvm cpp database-proxy field-level-encryption searchable-encryption tokenization data-masking sql-firewall intrusion-detection honeypot data-leakage-prevention key-management acrastruct themis linux docker kubernetes nodejs android ios

10 sources

Member repositories

RepositoryRoleHealth v2
cossacklabs/acramain58

For agents

markdown · JSON · MCP: product_card(name="cossacklabs/acra")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem