
TypeScript SDK for field-level searchable encryption on PostgreSQL databases.
TypeScript SDK for field-level searchable encryption on PostgreSQL databases.
CipherStash Protect is a TypeScript SDK that adds field-level searchable encryption to PostgreSQL databases. It allows developers to encrypt individual database columns (strings, numbers, JSON objects) while retaining the ability to query encrypted data without decrypting it first. Protect operates as an additional encryption layer complementing TLS (in-transit) and disk encryption (at-rest), specifically targeting data-in-use protection. Encrypted fields can be searched using equality and free-text search query types, enabling standard query patterns against ciphertext. The SDK is installed via npm (`@cipherstash/protect`) and integrates with existing PostgreSQL workflows using a schema definition approach (`csTable`, `csColumn`). Developers define which columns to encrypt and what search capabilities each column supports, then call `encrypt` and `encryptQuery` methods before reading/writing to the database. Protect is built on top of ZeroKMS, CipherStash's zero-trust key management service. Key architectural properties include: - Zero-knowledge architecture: CipherStash does not have access to data keys; a unique data key is generated per value. - Cryptographic proofs: Attribute-based access control is enforced via lock contexts with cryptographically proven, immutable audit trails. - Identity-bound encryption: Integrates with existing identity provider (IDP) services to bind data access to specific user identities and enforce claim-based access control. A free tier is available offering 10,000 operations per month with no credit card required.
Common questions about CipherStash Protect including features, pricing, alternatives, and user reviews.
CipherStash Protect is TypeScript SDK for field-level searchable encryption on PostgreSQL databases, developed by CipherStash. It is a Data Protection solution designed to help security teams with Encryption, Database Security, Multi Tenancy.
CipherStash Protect offers the following core capabilities:
CipherStash Protect integrates natively with Drizzle, Prisma, Supabase SDK. Integration support lets security teams connect CipherStash Protect to existing SIEM, ticketing, identity, and notification systems without custom development.
CipherStash Protect is deployed as a cloud solution, suited to startup, smb, mid-market, enterprise organizations looking to operationalize data protection. The commercial offering is positioned for production security operations with vendor support and SLAs.
CipherStash Protect is built for security teams handling Encryption, Database Security, Multi Tenancy. It supports workflows including field-level encryption for individual postgresql columns, searchable encryption (equality and free-text search on encrypted data), encrypt strings, numbers, and json objects. Teams typically adopt CipherStash Protect when they need to data protection capabilities integrated into their existing stack. Explore similar tools at https://cybersectools.com/alternatives/cipherstash-protect
CipherStash Protect is a commercial Data Protection solution. For detailed pricing information, visit https://cipherstash.com/stack/protect or contact CipherStash directly.
Popular alternatives to CipherStash Protect include:
Compare all CipherStash Protect alternatives at https://cybersectools.com/alternatives/cipherstash-protect
CipherStash Protect is for security teams and organizations that need Encryption, Database Security, Multi Tenancy. It's particularly suitable for enterprises requiring robust, commercial-grade security capabilities. Other Data Protection tools can be found at https://cybersectools.com/categories/data-protection
Head-to-head feature, pricing, and rating breakdowns.
Data security platform for real-time protection of sensitive data access
Column-level database encryption without application code modification
Data security platform providing in-use encryption for databases and apps
FHE-powered vector database security platform for AI/LLM data protection