About
Built by people who run the sites it protects.
DBshieldX is made by Star General Ltd, a small company in Southampton, UK. We built it for our own production sites first, and we still run it there.
Why we built it
We run our own websites and servers. Like everyone, we saw constant scanning and injection attempts in our logs, and like many teams, we hesitated to switch a firewall to blocking because we couldn't be sure it wouldn't break something.
So we built the firewall we wanted: one that shows what it would block before it blocks anything, lets us switch routes on one at a time, and can undo any change in seconds. And because the "DB" matters to us, it also checks the SQL our apps send to the database.
How we work
- Our own sites first. DBshieldX protects 16 of our production sites on 4 servers. New versions run there before anyone else's.
- Dated, honest numbers. Every figure on this site comes from our own records, carries a date and is explained on the results page.
- No overclaiming. Blocking is done by rules you can read and by your app's learned query shapes. A machine-learning scorer is in evaluation and only observes; we'll say when that changes.
- Your data stays with you. DBshieldX is self-hosted. Payload detail is off by default.
- Security reports welcome. See our vulnerability disclosure policy.
The company
DBshieldX is a product and trading name of Star General Ltd, a private limited company registered in England and Wales, company number 12524695, incorporated in March 2020. Registered office: 114 Cedar Road, Southampton, SO14 6TH. We are registered with the Information Commissioner's Office, registration ZC250727. Director: Peter Mitala.
Email info@dbshieldx.com or call 0808 178 5635.
See it on your own traffic.
We'll set up DBshieldX in monitor mode on one of your sites and walk you through what it finds after a week. Nothing is blocked until you say so.