Home/DBShield

DBShield

Wire Proxy · v1.1.0

Database Guardrail, Virtual Schema Masking & Live Wire Proxy for Autonomous AI Agents

DBShield sits between autonomous AI coding agents and your databases (PostgreSQL, MySQL, SQLite, Supabase, Neon). It masks sensitive tables from agent introspection, isolates destructive mutations in dry-run transactions, and routes high-risk queries to your Slack or Teams channel with interactive 1-click approvals.

$brew install dbshield
$dbshield proxy --upstream postgres://user:pass@localhost:5432/main
GitHub Repository

Enterprise Database Defense Architecture

01 / SCHEMA MASKING

Virtual Schema RBAC

Dynamically intercepts information_schema and pg_catalog queries. AI agents never see customer PII columns, authentication tables, or internal audit logs.

02 / CHATOPS INTEGRATION

Slack & Teams Approval Feed

Sends HMAC-SHA256 authenticated interactive Block Kit cards to your corporate #db-approvals channel. Human engineers can review AST diffs and approve with 1 click.

03 / DRY-RUN TOKENS

Distributed Dry-Run Manager

Coordinates two-phase dry-run transaction verification across multi-store architectures (PostgreSQL + Redis + SQLite) before applying any mutations.

Interactive ChatOps Bot in Action

Real-Time Slack & Teams Approvals

DB
DBShield Guardrail BotAPP
#db-approvals · Just now
PROPOSED AGENT MUTATION:
UPDATE accounts SET status = 'archived' WHERE balance < 0;
Risk Score: 88 / 100 (HIGH)
Estimated Affected Rows: 14,290