For mask sensitive data in my database, the first results are qovery/replibyte, alibaba/otter (Otter is a distributed database replication and synchronization system focused on real-time data mirroring across regions, not a tool for anonymizing or masking sensitive data — it lacks the core anonymization techniques and rule-based data masking required for this search) and pentaho/pentaho-kettle. microsoft/presidio and tortoise/tortoise-orm round out the shortlist. Compare the match explanations and check the project documentation against your requirements.
Open-source utilities for anonymizing, obfuscating, and masking sensitive information within relational and non-relational database systems.
Replibyte is a tool that automates the lifecycle of database snapshots for non-production environments, handling the export, anonymization, subsetting, and restoration of data. It is designed to support privacy-compliant development workflows by replacing sensitive production data with synthetic values and extracting consistent subsets of rows while preserving referential integrity. The tool operates through a configurable pipeline defined in a YAML file, orchestrating stages such as dump, anonymize, subset, and restore. Each operation runs as an isolated, ephemeral container job, and snapsho
Replibyte automates anonymization and subsetting of database snapshots for non-production environments, supporting PostgreSQL, MySQL, and MongoDB with rule-based YAML configuration, referential integrity preservation, and CI/CD-friendly pipeline stages — exactly the comprehensive data masking tool this search targets.
Otter is a distributed database synchronization system and change data capture tool designed to replicate data between databases across multiple geographic regions. It functions as a synchronization orchestrator and ETL data pipeline that mirrors records and associated files in real time. The system employs incremental log parsing to capture database changes and utilizes a consistency-based convergence algorithm and loop-avoidance logic to manage bi-directional replication. It processes data through a pipeline of selection, extraction, transformation, and loading to handle joins and format co
Otter is a distributed database replication and synchronization system focused on real-time data mirroring across regions, not a tool for anonymizing or masking sensitive data — it lacks the core anonymization techniques and rule-based data masking required for this search.
Pentaho Kettle is an enterprise ETL data integration platform designed to extract, transform, and load data between disparate sources and target databases. It functions as a metadata-driven orchestrator that utilizes a visual workflow designer to create and manage complex sequences of data tasks and transformation pipelines. The system is distinguished by its distributed data processing engine, which executes workloads across clusters of server nodes to increase throughput. It employs a plugin-based architecture, allowing the platform to be extended via external JAR files to provide connectiv
Pentaho Kettle is a general‑purpose ETL and data integration platform, not a dedicated data masking or anonymization tool; while it could be used to build masking workflows, it lacks built‑in anonymization techniques, rule‑based masking configuration, or referential integrity preservation out of the box.
Presidio is a PII detection and anonymization framework designed to identify and mask personally identifiable information in text. It functions as a PII recognition pipeline and a data masking engine, using a combination of machine learning, regular expressions, and rule-based logic to locate sensitive entities. The system acts as an NER model orchestrator, allowing for the integration of external named entity recognition models and PII detectors to support multi-language privacy scrubbing. It employs a plugin-based recognizer architecture that can be extended with custom recognizers, deny-li
Presidio is a framework for detecting and masking PII in unstructured text and images, not a database-oriented tool that handles table rows, referential integrity, or data subsetting — so it addresses the broad anonymization goal but from a different domain.
Tortoise ORM is an asynchronous object-relational mapper for Python that mirrors Django's model and queryset API while running on asyncio. It defines database tables as Python classes with typed fields and supports foreign key, many-to-many, and one-to-one relations, providing a chainable query API for filtering, annotating, grouping, and prefetching related objects without blocking the event loop. The ORM includes a built-in migration engine that detects model changes, generates migration files, and applies or reverts schema changes through a command-line tool. It connects to PostgreSQL, MyS
Tortoise ORM is an asynchronous object-relational mapper for Python, not a data masking or anonymization tool—it helps you interact with databases but provides no built-in masking, substitution, subsetting, or rule-based anonymization features.
Mage AI is a Python-based data pipeline orchestrator and self-hosted data integrated development environment. It is designed for building, scheduling, and monitoring data workflows using a block-based pipeline design and interactive notebook interface. The platform distinguishes itself by integrating generative AI capabilities, allowing users to connect large language model providers via API to incorporate artificial intelligence into automated data streams. It also functions as an Apache Spark data processor, managing the kernels and infrastructure required for high-volume analytics and larg
Mage AI is a data pipeline orchestrator and IDE, not a dedicated data masking or anonymization tool, so it lacks built-in anonymization techniques and rule-based masking configuration for databases.
ERPNext is a comprehensive enterprise resource planning suite designed to integrate core organizational functions, including accounting, inventory, human resources, and project management, into a single unified platform. It operates as a metadata-driven business application, where data structures and application logic are defined through configuration rather than hard-coded programming to facilitate rapid customization. The system distinguishes itself through a robust security and governance framework that enforces granular, role-based access control across all document operations. It feature
ERPNext is an enterprise resource planning suite that may include data masking capabilities, but its core identity is an ERP system rather than a dedicated database anonymization and subsetting tool for development and testing.
SeaTunnel is a distributed data integration engine designed to synchronize structured and unstructured data across diverse sources and sinks. It functions as a multi-engine execution framework that can run data integration tasks across different distributed computing backends to optimize workload performance. The project is distinguished by a visual data pipeline designer for configuring workflows without manual code and a specialized change data capture tool for streaming incremental database updates. It also includes an enrichment pipeline that integrates large language models and embedding
SeaTunnel is a distributed data integration engine for moving and transforming data across systems, which can technically enable masking via its transformation pipelines, but it is not a dedicated data-anonymization tool with built-in masking techniques or referential integrity preservation—it’s the broader pipeline layer you would combine with a dedicated masking tool, not the tool itself.
Keploy is an automated testing platform that leverages kernel-level traffic interception to generate and maintain regression test suites for microservices. By capturing live network traffic and system calls via eBPF, the platform automatically creates deterministic test cases and mocks external dependencies without requiring manual code instrumentation. This approach allows developers to validate application behavior and API contracts by replaying production-like traffic in isolated environments. The platform distinguishes itself through its use of machine learning to perform test maintenance
Keploy is a testing platform that generates test cases from network traffic, and while it may involve some test data management or data masking features, its main purpose is regression testing, not database data anonymization or masking for safe subsets.
| Repository | Stars | Language | License | Last push |
|---|---|---|---|---|
| qovery/replibyte | 4.4K | Rust | gpl-3.0 | |
| alibaba/otter | 8.1K | Java | Apache-2.0 | |
| pentaho/pentaho-kettle |
| 8.4K |
| Java |
| NOASSERTION |
| microsoft/presidio | 7K | Python | mit |
| tortoise/tortoise-orm | 5.6K | Python | Apache-2.0 |
| mage-ai/mage-ai | 8.8K | Python | Apache-2.0 |
| frappe/erpnext | 35.7K | Python | GPL-3.0 |
| apache/seatunnel | 9.4K | Java | Apache-2.0 |
| keploy/keploy | 17.6K | Go | Apache-2.0 |