MyDiamo
Column-level encryption for open-source databases without code changes
About MyDiamo
MyDiamo is a transparent column-level encryption solution for open-source databases including MySQL, MariaDB, PerconaDB, and PostgreSQL. Developed by Penta Security Systems since 2013, it operates at the engine level requiring no code modification, providing 256-bit encryption with access control and auditing for HIPAA and PCI-DSS compliance.
Pros & Cons
Pros
- Free for non-commercial use with full encryption capabilities
- No code modification needed — operates transparently at the engine level
- Column-level granularity avoids encrypting irrelevant data
- Low performance impact of ~6.5% measured overhead
- Supports all major open-source databases (MySQL, MariaDB, Percona, PostgreSQL)
Cons
- Encrypted columns cannot be indexed, affecting query performance on those fields
- Initial setup can be complex and requires database administration expertise
- Commercial license pricing is not publicly listed
- Limited to open-source databases — no support for Oracle, SQL Server, or DB2
- Smaller community compared to native database encryption features
Key Features
Column-Level Encryption
Encrypt specific database columns with 256-bit encryption rather than entire tables, minimizing performance overhead
Transparent Encryption
Engine-level operation requires no application code modification for seamless integration
Partial Encryption
Encrypt only sensitive fields like SSNs or credit cards while leaving non-sensitive data accessible
Access Control
Granular control over who can access encrypted data with role-based permissions per column
Audit Logging
Track and monitor all access to encrypted columns for compliance reporting and security analysis
Multi-Database Support
Works with MySQL, MariaDB, PerconaDB, and PostgreSQL on both Windows and Linux
Compliance Support
Helps meet HIPAA, PCI-DSS, GDPR, and other regulatory requirements for data protection
Low Performance Impact
Measured 6.5% overhead by sysbench, significantly less than full-database encryption approaches
Pricing
- Full encryption features
- Non-commercial use only
- Community support
- All supported databases
- Commercial use license
- Technical assistance
- Compliance certification support
- Priority support
Best For
Healthcare Data Protection
Encrypt patient records and PHI in MySQL/MariaDB databases to meet HIPAA requirements without rewriting applications
Payment Data Security
Protect credit card numbers and financial data at the column level for PCI-DSS compliance
GDPR Personal Data Encryption
Encrypt personally identifiable information in European applications while keeping non-sensitive business data accessible
Similar Tools
Proton Mail
Secure, privacy-first email built in Switzerland
Airia
Enterprise AI orchestration, security, and governance platform
DataSnipper
AI Agents for faster Audit and Finance workflows
SAP Concur
Enterprise-grade travel and expense management with deep ERP integration and global compliance
Bright Data
Enterprise-grade web data platform with AI-powered no-code scraping
SS&C Blue Prism
Enterprise-grade intelligent automation platform for regulated industries