Advanced Security

Protect data in tablespaces with transparent data encryption (TDE) and dynamically mask sensitive data returned by database queries with data redaction. Oracle Advanced Security combines these powerful data protection capabilities into a single, easy-to-configure solution.

Why do organizations need Oracle Advanced Security?

Encrypt data at rest

Meet compliance requirements for regulations, such as GDPR, CCPA, PCI-DSS, HIPAA, and more. Satisfy audit requirements and avoid fines.

Prevent out-of-band access to data

Leverage transparent data encryption to ensure that data can only be accessed through the database and can’t be read directly from disk, backups, or exports.

Prevent exposure of sensitive data

Control the ability to view sensitive data based on granular conditions, such as IP address, program used, time of day, and more, with data redaction policies.

Oracle Advanced Security features

Protect data at rest

Transparent data encryption (TDE) stops would-be attackers from bypassing the database and reading sensitive information directly from storage by enforcing data-at-rest encryption in the database layer. Encrypt individual data columns, entire tablespaces, database exports, and backups to control access to sensitive data.

Manage keys based on policies

Store and manage keys locally in wallets or centrally with Oracle Key Vault. Encrypt data quickly with system-generated keys or use your own encryption keys with the bring-your-own-key (BYOK) capability.

Oracle Data Pump integration

Seamlessly encrypt database exports to securely relocate data to other TDE-encrypted databases.

Oracle Recovery Manager (RMAN) integration

Protect database backups from data theft with automatic encryption of save sets and quickly restore databases using encryption keys securely stored with the backups.

Minimize sensitive data exposure

Reduce the risk of unauthorized data exposure in applications by redacting sensitive data before it leaves the database. Partial or full redaction prevents large-scale extraction of sensitive data into reports and spreadsheets.

Epsilon logo

Epsilon uses Oracle Advanced Security to encrypt customer data

“Security is a big concern to our customers, because we do have PII information. Oracle does a great job in the security area for us. We really feel like, especially as we move into the cloud, that Transparent Data Encryption gives us the ability to control that encryption process. We have the keys to our data.”
Keith Wilcox, Vice President, Database Administration, Epsilon

Join the Oracle Database security monthly community call.


Oracle Advanced Security for Oracle Database 21c


AskTOM Oracle Database Security Office Hours

AskTOM Office Hours offers free, open Q&A sessions with Oracle Database experts who are eager to help you fully leverage the multitude of enterprise-strength database security tools available to your organization.

Learning Library

LiveLabs Workshop: Oracle Advanced Security

This workshop introduces Oracle Advanced Security’s features: Transparent data encryption (TDE) and data redaction. Explore how to configure these features to protect databases and the data contained therein. Run this workshop on your own tenancy or reserve a time to run the workshop on LiveLabs, free of charge.

You may also be interested in

Get started with Oracle Advanced Security

Read the technical report

Take a deep dive to learn more about Oracle Advanced Security.

Try a LiveLabs workshop

Get hands-on experience with Oracle Advanced Security today.

Contact Sales

Interested in learning more? Contact an Oracle expert.

Buy now

Buy Oracle Advanced Security and start encrypting today.