Security

AI agents on sensitive data: what PostgreSQL can enforce, and what it can’t

Every useful database content, document behind an internal AI agent names someone, a company, server names,… A relationship manager might ask “what did this client complain about last quarter?”, an operations engineer might ask “what happened on this server(…)

Data Point Prague 2026

For the first time, I joined some days ago the Data Point Prague . The biggest International Data Conference in Prague. A two-day event dedicated to advancing knowledge in data technologies. Thanks to dbi-services to let me(…)

Customer case study – automating SQL Server TLS Encryption with Ansible and Certificates (Architecture)

When working with SQL Server environments, securing client connections can become an important requirement, especially when TLS encryption must be implemented using certificates. In this context, a customer asked us to develop an Ansible playbook and role to automate(…)

Beyond TDE and TLS: Bridging the Data Security Governance Gap in Lower Environments

Why one layer is never enough, why dev environments are your biggest GDPR gap, and how to industrialize their governance.

Remove grant to public in Oracle databases

CIS recommendations The Center for Internet Security publishes the “CIS Oracle database 19c Benchmark” with recommendations to enhance the security of Oracle databases. One type of recommendations is to remove grant execute to public (chapter 5.1.1.1-5.1.1.7 Public(…)

SQL Server Always-On: Centralizing Backup History Across Replicas

Replace brittle T-SQL links and manual checks with a central PowerShell orchestrator to reliably manage Always On backup data at scale.

Data Anonymization as a Service with Delphix Continuous Compliance

Context In the era of digital transformation, attack surfaces are constantly evolving and cyberattack techniques are becoming increasingly sophisticated. Maintaining the confidentiality, integrity, and availability of data is therefore a critical challenge for organizations, both from an operational and(…)

Setting up TLS encryption and authentication in MongoDB

When securing a MongoDB deployment, protecting sensitive data is essential. MongoDB supports encryption throughout the lifecycle of the data, with three primary types of data encryption : Encryption in transit Encryption at rest Encryption in use Among these,(…)

Scheduling OpenSCAP reports in SUSE Multi-Linux Manager

As we’ve recently supported some customers on SUSE Multi Linux Manager I’d like share something which was not as easy to implement as it appeared to be in the first place. But first of all,(…)

Different types of Oracle wallets

In this blog post I will explain the different types of Oracle wallet with the auto_login feature. What is an Oracle Wallet An Oracle wallet is used to store certificates for Listeners with https protocol, or it can(…)