nowfound

Dev tools · March 28, 2025

Searchable encryption, SQL proxy for Postgres

CipherStash Proxy keeps your sensitive data in PostgreSQL encrypted and searchable, without changing your SQL queries. It is written in Rust, uses a formally type-check SQL mapper and searchable encryption.

Searchable encryption, SQL proxy for Postgres launched on March 28, 2025 with 10 votes, #2,743 of 7,215 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 1 year on.

In plain words

CipherStash Proxy is a SQL proxy for PostgreSQL that encrypts sensitive data while keeping it searchable without requiring changes to existing SQL queries. Built in Rust and featuring a formally type-checked SQL mapper, it allows developers to add encryption to PostgreSQL databases transparently. The tool is designed for teams that need to protect sensitive information in their databases while maintaining normal query functionality.

written from the facts on this page · September 2026

From the sources

Introducing version 2 of CipherStash Proxy, our no-code data-protection solution for PostgreSQL.

This announcement is from March 2025 and mentions Protect.js in the present tense. Protect.js has since been superseded by CipherStash Stack — same project, renamed and expanded. CipherStash Proxy itself is current; read the Proxy documentation for how it works today. Following fast on the heels of last week’s Protect.js announcement , we’re excited to introduce version 2 of CipherStash Proxy , our no-code data-protection solution for PostgreSQL. CipherStash Proxy keeps your sensitive data in PostgreSQL encrypted and searchable, without changing your SQL queries. This means that you can protect your most sensitive data with strong security controls, without slowing down your dev team. While…from cipherstash.com

Does a similar job

all alternatives →
  • CipherStash Stack – Data Level Access Control in TS/JSMay 2026 · cipherstash.com · ▲17

    Hi HN, I'm Dan Draper, founder of CipherStash. We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography :) CipherStash Stack is: * A searchable encryption SDK for TS and Postgres * Fast, key management with Zerokms (backed by HSM) * A transparent SQL proxy * Auth library and OIDC federation service * Skills for data security Integrations include Prisma Next, Drizzle, Auth0, Clerk…

  • PGT-Proxy – A PostgreSQL Proxy in 277 Lines of Rust2024 · github.com · ▲10

    It's time we talked about something many developers, data analysts, and even web application servers are guilty of: downgrading PostgreSQL connection security. Too often, we see connections dropped from full TLS verification to "any TLS" (i.e., sslmode=require) or, even worse, plain text connections. Why? Because most cloud providers, like AWS or Google Cloud SQL, use non-public Certificate Authorities for PostgreSQL. The result? Unverified TLS connections because no one has time to set up all devices across an organization to trust custom certificate authorities. And here's the most…

  • SQL-tap – Real-time SQL traffic viewer for PostgreSQL and MySQLFeb 2026 · github.com · ▲233

    sql-tap is a transparent proxy that captures SQL queries by parsing the PostgreSQL/MySQL wire protocol and displays them in a terminal UI. You can run EXPLAIN on any captured query. No application code changes needed — just change the port.

  • Embed an SQLite database in your PostgreSQL table2024 · github.com · ▲180

    pglite-fusion is a PostgreSQL extension that allows you to embed SQLite databases into your PostgreSQL tables by enabling the creation of columns with the `SQLITE` type. This means every row in the table can have an embedded SQLite database. In addition to the PostgreSQL `SQLITE` type, pglite-fusion provides the `query_sqlite`` function for querying SQLite databases and the `execute_sqlite` function for updating them. Additional functions are listed in the project’s README. The pglite-fusion extension is written in Rust using the pgrx framework [1]. ---- Implementation Details The PostgreSQL…

  • VP
    VeilStream – prod-like data without the PII2025 · app.veilstream.com · ▲22

    # TL;DR We built VeilStream, a drop-in, read-only PostgreSQL proxy that strips, masks, or anonymizes sensitive values as queries stream through. In less than two minutes, you can put a proxy in front of a PostgreSQL database, whether hosted on your laptop, Neon, Supabase, or a cloud provider, and the user is able to start configuring filter rules. The use cases we're trying to solve are: - Production-like data in development environments - Improve incident handling by masking all data that is not relevant - Share a subset of your data - Protecting data being shipped into a data lake - Safe…

  • Advanced encryption in PostgreSQL2016 · github.com · ▲12

    Postgres Themis plugin. Contribute to cossacklabs/pg_themis development by creating an account on GitHub.

Questions this answers

More dev tools this month

the category →
  • /dev/null▲483

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 27d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 25d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲345

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 20d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 28d ago · corespeed.io

Source: Show HN post ↗

Launched alongside, March 2025

the whole month →
  • Mimic Human Research & Save Findings in AI Knowledge Base

    AI · 2025 · sider.ai

  • Turn your ideas into products that sell

    AI · 2025 · atoms.dev

  • Aha▲1,152

    The world's first AI influencer marketing team

    AI · 2025 · ahacreator.com

  • Fluently▲976

    Start speaking English as well as your native language

    AI · 2025 · getfluently.app

  • Conversational AI surveys, interviews, user tests, polls

    AI · 2025 · theysaid.io

  • Record your screen, share instantly, look like a PRO

    Growth · 2025 · supercut.ai