# cossacklabs/acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Repository: https://github.com/cossacklabs/acra
Canonical: https://ross.abutalabs.com/products/cossacklabs-acra
Homepage: https://www.cossacklabs.com/acra/
Language: Go
License: Apache-2.0
License Family: permissive
Topics: encryption-server, encryption, crypto, cryptography, security, intrusion-detection, databases, golang, django, python3, php, database-proxy, honeypot
Last push: 2026-04-23T00:16:58+00:00

## Health v2 (maintenance only)
Score: 58/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 78, release rhythm 8, longevity 100
- inputs: {"age_days": 3579, "days_push": 133, "days_rel": 723, "gap_med": null, "n_releases_24m": 1}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1491, forks 140 (observed 2026-08-28T04:04:52.465561+00:00)

## What it is
Acra is a database security suite that provides field-level encryption, searchable encryption, tokenization, data masking, SQL firewalling, and intrusion detection for SQL and NoSQL databases. It deploys as a transparent SQL proxy (AcraServer), an encryption-as-a-service API (AcraTranslator), or in-app SDKs, and is built in Go.

## Use cases
- encrypt sensitive fields in postgres or mysql transparently
- search over encrypted database columns
- prevent sql injection and block unwanted database queries
- detect database intrusion attempts and data leakage
- tokenize and mask personal data for compliance
- add client-side encryption to web and mobile apps
- protect healthcare or fintech data at rest

## When to choose
- you need field-level or application-level encryption without rewriting your app
- compliance requires encryption, masking, tokenization, and audit logging of sensitive data
- you want a proxy-based transparent encryption layer in front of PostgreSQL or MySQL
- you need searchable encryption or a SQL firewall with intrusion detection

## When to avoid
- your server environment is Windows (server components require Linux)
- you need a lightweight library-only solution without running extra infrastructure
- you rely on MySQL Protocol X or unsupported database protocols in the community edition
- your stack uses databases not speaking the PostgreSQL or MySQL wire protocols

## Facets
- artifact type: service
- maturity: active
- function: cryptography, database, security, caching, logging, monitoring, search-engine
- domain: security, databases, privacy, backend, healthcare, fintech
- platform: self-hosted, cloud, go, python, php, ruby, jvm, cpp
- tags: database-proxy, field-level-encryption, searchable-encryption, tokenization, data-masking, sql-firewall, intrusion-detection, honeypot, data-leakage-prevention, key-management, acrastruct, themis, linux, docker, kubernetes, nodejs, android, ios

## Member repositories
- cossacklabs/acra (main) score 58

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:52.465561+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:33:33.794074+00:00, confidence not recorded.
  - readme: https://github.com/cossacklabs/acra (fetched 2026-08-28T04:04:52.465561+00:00, sha 90632935b126)
  - homepage: https://www.cossacklabs.com/acra/ (fetched 2026-08-29T11:39:36.459591+00:00, sha 7fd45c508d27)
  - site_page: https://docs.cossacklabs.com/ (fetched 2026-08-29T11:39:36.470230+00:00, sha 62106cd6d23a)
  - site_page: https://www.cossacklabs.com/about (fetched 2026-08-29T11:39:36.472718+00:00, sha 8e5ff75638da)
  - site_page: https://www.cossacklabs.com/documentation (fetched 2026-08-29T11:39:36.476464+00:00, sha 975dcf666f67)
  - site_page: https://docs.cossacklabs.com/acra/getting-started/installing/building-acrawriter (fetched 2026-08-29T11:39:36.478137+00:00, sha 93e958f2c71e)
  - site_page: https://docs.cossacklabs.com/acra/getting-started/requirements (fetched 2026-08-29T11:39:36.480199+00:00, sha ce3684c9febe)
  - site_page: https://docs.cossacklabs.com/acra/getting-started/availability (fetched 2026-08-29T11:39:36.482038+00:00, sha 74e67931cc00)
  - site_page: https://docs.cossacklabs.com/acra/getting-started/installing/launching-acra-from-docker-images (fetched 2026-08-29T11:39:36.483662+00:00, sha f521167818b8)
  - site_page: https://www.cossacklabs.com/news (fetched 2026-08-29T11:39:36.474769+00:00, sha 3901be7c4841)
- Data as of 2026-08-30T08:39:29.467469+00:00.