awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com

Database Sensitive Data Masking Tools

Ranking updated Jun 30, 2026

For mask sensitive data in my database, the first results are qovery/replibyte, alibaba/otter (Otter is a distributed database replication and synchronization system focused on real-time data mirroring across regions, not a tool for anonymizing or masking sensitive data — it lacks the core anonymization techniques and rule-based data masking required for this search) and pentaho/pentaho-kettle. microsoft/presidio and tortoise/tortoise-orm round out the shortlist. Compare the match explanations and check the project documentation against your requirements.

Open-source utilities for anonymizing, obfuscating, and masking sensitive information within relational and non-relational database systems.

Database Sensitive Data Masking Tools

Find the best repos with AI.We'll search the best matching repositories with AI.
  • qovery/replibyteQovery avatar

    Qovery/Replibyte

    4,381View on GitHub↗

    Replibyte is a tool that automates the lifecycle of database snapshots for non-production environments, handling the export, anonymization, subsetting, and restoration of data. It is designed to support privacy-compliant development workflows by replacing sensitive production data with synthetic values and extracting consistent subsets of rows while preserving referential integrity. The tool operates through a configurable pipeline defined in a YAML file, orchestrating stages such as dump, anonymize, subset, and restore. Each operation runs as an isolated, ephemeral container job, and snapsho

    Replibyte automates anonymization and subsetting of database snapshots for non-production environments, supporting PostgreSQL, MySQL, and MongoDB with rule-based YAML configuration, referential integrity preservation, and CI/CD-friendly pipeline stages — exactly the comprehensive data masking tool this search targets.

    RustAnonymization RulesData AnonymizationProduction Data Subsetting
    View on GitHub↗4,381
  • alibaba/otteralibaba avatar

    alibaba/otter

    8,127View on GitHub↗

    Otter is a distributed database synchronization system and change data capture tool designed to replicate data between databases across multiple geographic regions. It functions as a synchronization orchestrator and ETL data pipeline that mirrors records and associated files in real time. The system employs incremental log parsing to capture database changes and utilizes a consistency-based convergence algorithm and loop-avoidance logic to manage bi-directional replication. It processes data through a pipeline of selection, extraction, transformation, and loading to handle joins and format co

    Otter is a distributed database replication and synchronization system focused on real-time data mirroring across regions, not a tool for anonymizing or masking sensitive data — it lacks the core anonymization techniques and rule-based data masking required for this search.

    JavaETL Workflows
    View on GitHub↗8,127
  • pentaho/pentaho-kettlepentaho avatar

    pentaho/pentaho-kettle

    8,353View on GitHub↗

    Pentaho Kettle is an enterprise ETL data integration platform designed to extract, transform, and load data between disparate sources and target databases. It functions as a metadata-driven orchestrator that utilizes a visual workflow designer to create and manage complex sequences of data tasks and transformation pipelines. The system is distinguished by its distributed data processing engine, which executes workloads across clusters of server nodes to increase throughput. It employs a plugin-based architecture, allowing the platform to be extended via external JAR files to provide connectiv

    Pentaho Kettle is a general‑purpose ETL and data integration platform, not a dedicated data masking or anonymization tool; while it could be used to build masking workflows, it lacks built‑in anonymization techniques, rule‑based masking configuration, or referential integrity preservation out of the box.

    JavaETL Workflows
    View on GitHub↗8,353
  • microsoft/presidiomicrosoft avatar

    microsoft/presidio

    6,995View on GitHub↗

    Presidio is a PII detection and anonymization framework designed to identify and mask personally identifiable information in text. It functions as a PII recognition pipeline and a data masking engine, using a combination of machine learning, regular expressions, and rule-based logic to locate sensitive entities. The system acts as an NER model orchestrator, allowing for the integration of external named entity recognition models and PII detectors to support multi-language privacy scrubbing. It employs a plugin-based recognizer architecture that can be extended with custom recognizers, deny-li

    Presidio is a framework for detecting and masking PII in unstructured text and images, not a database-oriented tool that handles table rows, referential integrity, or data subsetting — so it addresses the broad anonymization goal but from a different domain.

    PythonData Anonymization
    View on GitHub↗6,995
  • tortoise/tortoise-ormtortoise avatar

    tortoise/tortoise-orm

    5,582View on GitHub↗

    Tortoise ORM is an asynchronous object-relational mapper for Python that mirrors Django's model and queryset API while running on asyncio. It defines database tables as Python classes with typed fields and supports foreign key, many-to-many, and one-to-one relations, providing a chainable query API for filtering, annotating, grouping, and prefetching related objects without blocking the event loop. The ORM includes a built-in migration engine that detects model changes, generates migration files, and applies or reverts schema changes through a command-line tool. It connects to PostgreSQL, MyS

    Tortoise ORM is an asynchronous object-relational mapper for Python, not a data masking or anonymization tool—it helps you interact with databases but provides no built-in masking, substitution, subsetting, or rule-based anonymization features.

    PythonMulti-Database SupportForeign Key Constraints
    View on GitHub↗5,582
  • mage-ai/mage-aimage-ai avatar

    mage-ai/mage-ai

    8,759View on GitHub↗

    Mage AI is a Python-based data pipeline orchestrator and self-hosted data integrated development environment. It is designed for building, scheduling, and monitoring data workflows using a block-based pipeline design and interactive notebook interface. The platform distinguishes itself by integrating generative AI capabilities, allowing users to connect large language model providers via API to incorporate artificial intelligence into automated data streams. It also functions as an Apache Spark data processor, managing the kernels and infrastructure required for high-volume analytics and larg

    Mage AI is a data pipeline orchestrator and IDE, not a dedicated data masking or anonymization tool, so it lacks built-in anonymization techniques and rule-based masking configuration for databases.

    PythonETL Workflows
    View on GitHub↗8,759
  • frappe/erpnextfrappe avatar

    frappe/erpnext

    35,726View on GitHub↗

    ERPNext is a comprehensive enterprise resource planning suite designed to integrate core organizational functions, including accounting, inventory, human resources, and project management, into a single unified platform. It operates as a metadata-driven business application, where data structures and application logic are defined through configuration rather than hard-coded programming to facilitate rapid customization. The system distinguishes itself through a robust security and governance framework that enforces granular, role-based access control across all document operations. It feature

    ERPNext is an enterprise resource planning suite that may include data masking capabilities, but its core identity is an ERP system rather than a dedicated database anonymization and subsetting tool for development and testing.

    PythonData Masking
    View on GitHub↗35,726
  • apache/seatunnelapache avatar

    apache/seatunnel

    9,427View on GitHub↗

    SeaTunnel is a distributed data integration engine designed to synchronize structured and unstructured data across diverse sources and sinks. It functions as a multi-engine execution framework that can run data integration tasks across different distributed computing backends to optimize workload performance. The project is distinguished by a visual data pipeline designer for configuring workflows without manual code and a specialized change data capture tool for streaming incremental database updates. It also includes an enrichment pipeline that integrates large language models and embedding

    SeaTunnel is a distributed data integration engine for moving and transforming data across systems, which can technically enable masking via its transformation pipelines, but it is not a dedicated data-anonymization tool with built-in masking techniques or referential integrity preservation—it’s the broader pipeline layer you would combine with a dedicated masking tool, not the tool itself.

    JavaETL Workflows
    View on GitHub↗9,427
  • keploy/keploykeploy avatar

    keploy/keploy

    17,622View on GitHub↗

    Keploy is an automated testing platform that leverages kernel-level traffic interception to generate and maintain regression test suites for microservices. By capturing live network traffic and system calls via eBPF, the platform automatically creates deterministic test cases and mocks external dependencies without requiring manual code instrumentation. This approach allows developers to validate application behavior and API contracts by replaying production-like traffic in isolated environments. The platform distinguishes itself through its use of machine learning to perform test maintenance

    Keploy is a testing platform that generates test cases from network traffic, and while it may involve some test data management or data masking features, its main purpose is regression testing, not database data anonymization or masking for safe subsets.

    GoData Masking
    View on GitHub↗17,622
Compare the top 10 at a glance
RepositoryStarsLanguageLicenseLast push
qovery/replibyte4.4KRustgpl-3.0Aug 8, 2025
alibaba/otter8.1KJavaApache-2.0May 25, 2024
pentaho/pentaho-kettle
8.4K
Java
NOASSERTION
Jun 26, 2026
microsoft/presidio7KPythonmitFeb 17, 2026
tortoise/tortoise-orm5.6KPythonApache-2.0Jun 15, 2026
mage-ai/mage-ai8.8KPythonApache-2.0Jun 24, 2026
frappe/erpnext35.7KPythonGPL-3.0Jun 16, 2026
apache/seatunnel9.4KJavaApache-2.0Jun 23, 2026
keploy/keploy17.6KGoApache-2.0Jun 16, 2026

Related searches

  • a field-level encryption library
  • Visual masking software
  • a toolkit for dataset cleaning and curation
  • an open source tool for generating data
  • a vulnerable web application for security training
  • a javascript library for data encryption
  • a python library for data encryption
  • a self-hosted password vault