New — Perimeter, our free website security & SSL checker, is now live. Run a free check →
Database security · proven, not promised

Guard every path
to your data.

Bastion is a modern, self-hosted database activity monitor. Capture every query across your fleet, mask sensitive data, learn normal behavior, and block what shouldn't happen — with a tamper-evident record your auditor can verify. Self-hosted. Nothing leaves your network.

Runs on-prem — no cloud, no data egress Tamper-evident, auditor-verifiable PostgreSQL · Oracle · SQL Server · SAP HANA
What we build

Security you can prove — across your stack.

Two products that hand you evidence, not promises: one guards your databases, one watches your public edge.

Databases

Bastion DAM

Always-on, self-hosted database activity monitoring: capture every query, mask sensitive data, enforce policy, and block what shouldn't happen — in a tamper-evident ledger auditors can verify.

Explore Bastion →
Website edge

Perimeter live · free check

Checks your TLS certificate, security headers and DNS/email authentication from the outside, then monitors them every day and alerts you the moment something breaks.

Explore Perimeter →
Bastion DAM · always-on

Watch and block every access — in real time.

A modern, self-hosted database activity monitor. Capture every session across your fleet, mask sensitive columns, learn normal behavior automatically, and enforce policy inline — with a provable record. A cleaner, faster alternative to legacy DAM appliances.

  • Hybrid capture — agentless for a zero-touch pilot, inline when you're ready to block.
  • Tamper-evident ledger — hash-chained and externally anchored, so an auditor can verify nothing was altered.
  • Auto-learned policy, masking & exfil detection — flag the abnormal without hand-writing a thousand rules.
Book a demo
Perimeter · website security · live

Is your website's edge configured right?

Databases are one attack surface — your public edge is another. Perimeter checks your TLS certificate, security headers and DNS / email authentication from the outside — exactly what an attacker or auditor sees — then watches them every day and emails you the moment something breaks.

  • Free instant check, no signup. Get a graded report of your certificate, headers and DMARC/SPF in seconds.
  • Continuous monitoring & alerts. Daily re-checks, instant regression alerts, and certificate-expiry warnings before they bite.
  • Audit-ready evidence. A dated, hosted report of continuous monitoring for your SOC 2 / ISO 27001 auditor.
Run a free check → See plans
Why Bastion

Built for regulated teams that have to prove it.

The incumbents drift to the cloud and hand you a black box. Bastion stays on your infrastructure and gives you evidence you can independently verify.

Nothing leaves

Fully self-hosted. No cloud, no agent phoning home, no customer data sent to us — ever. Your GDPR/PDPL moat.

Provable, not trust-me

A tamper-evident, externally-anchored ledger means any later edit is detectable. Findings your auditor can hand-verify.

Modern & AI-native

Auto-learned policy, session replay, and exfiltration detection — not a decade-old appliance with a rules spreadsheet.

Broad coverage

One platform across your estate — relational, big-data and cloud engines, captured through a single pipeline.

PostgreSQLOracleSQL ServerSybase SAP HANATeradataHive / ImpalaSnowflake
Get started

See it on your own systems.

Book a 20-minute Bastion demo for your databases — or run a free Perimeter check on your website right now. No sales call needed for Perimeter.

ahsan@getunlogged.com