Krontech · Data Security

Kron DAM

Database Activity Monitoring & Dynamic Data Masking — complete visibility, control, and audit.

Kron DAM (Database Activity Monitoring) is a comprehensive data-security platform that gives you complete visibility, control, and audit over every database environment. It continuously monitors every query, schema change, and data-access event — ensuring data integrity, regulatory compliance, and real-time threat detection across your entire database estate.

Kron DAM also includes Dynamic Data Masking (DDM), protecting sensitive fields in real time — so users can work with data functionally without ever seeing confidential information such as credit-card numbers, personal identifiers, or health records. Kron DAM is recognised by Gartner in its Market Guide for Data Masking and Synthetic Data, and trusted by enterprises across finance, healthcare, government, and telecom.

How it works — database monitoring architecture

Kron DAM sits between users and databases as a transparent monitoring and control layer. Every query is intercepted, logged, policy-checked, and — where rules dictate — sensitive data is masked before results reach the user. The actual database is never modified. It supports all major enterprise databases — Oracle, MySQL/MariaDB, Microsoft SQL Server, PostgreSQL, MongoDB, and leading cloud databases — from a single centralised console.

Kron DAM — Database Activity Monitoring ArchitectureWHO ACCESSESMONITORED DATABASESDBA / DB AdminsPrivileged database usersDevelopersApplication / ad-hoc queriesThird-Party PartnersContractors & suppliersApplicationsService accounts & appsInsider / AnomalousDetected & alertedOracleEnterprise databaseMySQL / MariaDBOpen-source RDBMSMicrosoft SQL ServerMSSQLPostgreSQLAdvanced open-source DBCloud DBsAWS RDS · Azure SQL · GCPAll queries interceptedMasked · controlled accessKRON DAMDatabase Activity MonitoringActivity Logging & Session RecordingReal-Time Alerts & Threat DetectionDynamic Data Masking (DDM)Policy-Based Access ControlVulnerability & Sensitive Data DiscoveryAll Databases · Agentless · CentralisedClick any node — a user, Kron DAM, or a database — for details
Users query through Kron DAM, which intercepts and controls access to every monitored database

Core capabilities

Kron DAM delivers six integrated capabilities that address the full spectrum of database security, compliance, and operations.

Kron DAM — Core CapabilitiesActivity Logging& Session RecordingTrack schema, tables, queriesComplete tamper-proof historyReal-Time Alerts& Threat DetectionUnauthorized modificationsInstant notificationsDynamic DataMasking (DDM)Sensitive fields hiddenUsable without exposurePolicy-BasedAccess ControlFine-grained restrictionsBy user / role / timeVulnerabilityManagementMisconfigs & over-privilegesContinuous scanningCompliance& Audit ReportingPCI · GDPR · HIPAA · SOXAudit-ready in one clickSix integrated capabilities — click any for details
The six core Kron DAM capabilities: activity logging, alerts, masking, access control, vulnerability management, and reporting

Dynamic Data Masking — how it works

Dynamic Data Masking intercepts query results in real time and replaces sensitive field values with masked equivalents for users who lack the appropriate access level — without any change to the database itself. Masking rules are configured centrally per data classification, user role, and data category: full data remains available to authorised users such as DBAs, while analysts and application users see only what they need.

Dynamic Data Masking — How It Worksreal resultmaskedReal Database4532-8811-2244-0011actual stored dataKRON DAMmasks in real timeno change to the databaseUnauthorized User****-****-****-0011sensitive data hiddenReal data goes in, masked data comes out — click any step for details
A query flows through Kron DAM, which masks sensitive fields before the result reaches an unauthorised user

Masking formats supported

Full masking

Replace all characters — e.g. ****-****-****-****

Partial masking

Show first or last N digits only — e.g. ****-0011

Substitution masking

Replace with realistic fake data

Encryption masking

Replace with an encrypted token

Null masking

Return empty / null for the field

Industry use cases

Finance & Banking

Protect customer PII, card data, and transaction records. Meet PCI DSS and SOX requirements.

Healthcare

Mask patient records and health data for HIPAA compliance; audit all EMR/EHR access.

Government

Control access to sensitive citizen data with a full audit trail for public-sector regulations.

Telecom / ISP

Protect subscriber data — usage records, billing info, and call data — with Dynamic Data Masking.

Retail / E-Commerce

Mask credit-card and order data for non-privileged staff; GDPR-compliant data handling.

Multi-Cloud

Consistent database activity monitoring across AWS RDS, Azure SQL, GCP, and on-premise.

Why Kron DAM?

Gartner-recognised

Listed in Gartner's Market Guide for Data Masking and Synthetic Data.

Unified platform

DAM and DDM in one product — no separate deployments or partner integrations.

Zero-change masking

Masks data at query time — no ETL, no data copies, no schema changes required.

Auto discovery

Automatically discovers databases and sensitive data columns across your environment.

All major databases

Oracle, MySQL, MSSQL, PostgreSQL, MongoDB, and leading cloud databases supported.

Instant compliance

Pre-built report templates for PCI DSS, GDPR, HIPAA, and SOX — audit-ready always.

Compliance & regulatory support

Kron DAM provides built-in support for major compliance frameworks through automated activity logging, sensitive-data discovery, access audit trails, and pre-built report templates.

PCI DSS

Cardholder data protection, access logging, and DB monitoring

GDPR

Personal data access governance and breach audit trail

HIPAA

Patient health information access controls and audit

SOX

Financial data integrity and privileged-user accountability

ISO/IEC 27001

Information security management and risk assessment

NIST SP 800-53

Database access controls and audit requirements

KVKK (Turkey)

Local personal-data protection compliance

Technical specifications

Deployment
Agentless; proxy-based or network-tap deployment; on-premise or cloud VM
Databases
Oracle, MySQL, MariaDB, Microsoft SQL Server, PostgreSQL, MongoDB, IBM DB2
Cloud DBs
Amazon RDS, Aurora, Azure SQL, Google Cloud SQL, Snowflake
Masking types
Full, partial, substitution, encryption, null — configurable per column/role
Monitoring
Real-time query interception, activity log, schema-change tracking
Alerting
Rule-based and AI-assisted anomaly alerts; SIEM/SOAR integration via API
Vulnerability
Continuous automated scanning; risk scoring; remediation guidance
Reporting
Pre-built PCI DSS, GDPR, HIPAA, SOX templates; custom report builder
Integration
SIEM, SOAR, ticketing (ServiceNow, Jira), and LDAP/AD via REST API

Ready to secure your databases?

Contact iconnet — an authorised Krontech partner — for a demo or proof-of-concept of Kron DAM & Dynamic Data Masking.