Data Masking and Subsetting
Unlock the value of data without increasing risk, while also minimizing storage cost. Oracle Data Masking and Subsetting helps organizations achieve secure and cost-effective data provisioning for a variety of scenarios, including test, development, and partner environments.
2025 KuppingerCole Leadership Compass for Data Security Platforms
Discover why KuppingerCole recognized Oracle as a Leader in database security
Why Oracle Data Masking and Subsetting
Protect sensitive data
Minimize data exposure in non-production environments by discovering and masking sensitive information, sharing only what's relevant.
Maximize data value
Safely share realistic, representative, and functionally intact data with relevant stakeholders to fuel test, development, and other initiatives.
Accelerate regulatory compliance
Leverage data masking and subsetting policies to demonstrate data protection by design and default to auditors.
Reduce costs
Reduce time, storage, and infrastructure costs by extracting and sharing only relevant data.
Oracle Data Masking and Subsetting features
Protect sensitive information by replacing real data with realistic, anonymized values and creating smaller, targeted copies of databases for development and testing. This reduces security risks, supports compliance, and limits unnecessary data exposure in non-production environments.
Sensitive data discovery
Discover and classify sensitive data to understand risk and aid in designing data protection policies. Determine referential relationships and create models to protect data integrity during data masking and subsetting operations.
Data masking
Mask sensitive data in nonproduction test, development, and analytics environments while preserving formats and referential integrity, and jump‑start projects with templates for Oracle E‑Business Suite and Oracle Fusion Applications.
Data subsetting
Create smaller data sets to save time and storage costs. Multi-factor subsetting techniques create representative, relevant, and functionally intact data sets.
Flexible deployment
Eliminate overhead on production by masking in-database, or use in-export masking to eliminate the need for staging environments.
Optimized for Oracle Database
Leverage the power of Oracle Database to minimize the time and resources required to create non-production databases.
Heterogeneous support
Mask and subset data in non-Oracle databases using Oracle Database Gateways, which is always included.
Resources
AskTOM Oracle Database Security Office Hours
AskTOM Office Hours offers free, open Q&A sessions with Oracle Database experts who are eager to help you fully leverage the multitude of enterprise-strength database security tools available to your organization.
LiveLabs Workshop: Oracle Data Masking and Subsetting
This workshop introduces Oracle Data Masking and Subsetting pack features and functionality. Explore how to discover sensitive data in Enterprise Manager 24ai, apply format- and integrity-preserving masking for test/dev, and create targeted subsets to reduce footprint and accelerate cloud migration.
Oracle Data Masking and Subsetting expands to discover 150+ new sensitive data types
Kajal Singh, Product Manager, Data Masking and Subsetting, Database Security, OracleOracle's Data Masking and Subsetting Pack has been enhanced to better protect sensitive data in non-production environments. Key updates include an expanded library of 187 sensitive data types, 66 built-in masking formats, auto-assignment of masking formats, and simplified security configuration with a least-privilege script. These enhancements streamline data discovery and masking processes, ensuring robust data protection in non-production environments.
Featured database security blogs
- December 10, 2025Oracle Key Vault is now available on Oracle Database Appliance
- December 9, 2025Keep your Oracle Audit Vault and Database Firewall (AVDF) Deployment Up to Date
- October 14, 2025Celebrating 5 Years of Innovation with Oracle Audit Vault and Database Firewall (AVDF)
- October 10, 2025Oracle Key Vault: Extending deeper into your environment
- Continue ReadingSee all
Get started with Oracle database security
Try Data Masking and Subsetting
Experience Data Masking and Subsetting by configuring your key use cases on LiveLabs. In this hands-on lab, you’ll locate sensitive data, mask it for non-production use, and create targeted subsets to reduce footprint and speed cloud moves.
Try masking with Data Safe
Experience Data Safe by configuring your key use cases on LiveLabs. This is an overview lab. It focuses on evaluating database configurations and security controls, assessing user security and privileges, monitoring user activity through auditing and alerts, discovering and masking sensitive data for compliance, and mitigating risks from SQL injection and compromised accounts using SQL Firewall.
Try Data Redaction
Oracle Data Redaction, part of Advanced Security, hides sensitive data in real time as it is queried, unlike data masking, which permanently alters data. In this lab, you’ll use new Data Redaction features in Oracle AI Database 26ai to create policies that selectively mask information in Oracle AI Autonomous Database.
Contact sales
Talk to a team member about Oracle Database security.