DB Forge: ETL Pipeline Builder + Database GUI & IDE | PostgreSQL, MongoDB, MySQL, Oracle
Skip to main content
GDPR · HIPAA · PCI-DSS · SOC 2 · CCPA · ISO 27001

The AI-Ready Platform for Data Engineering & Privacy

Your one stop IDE & GUI forMongoDB

Discover and mask PII across SQL and NoSQL databases. Build privacy-aware ETL pipelines. Query with IntelliShell, profile slow queries with AI, and migrate schemas, all in one enterprise-grade platform.

No credit card required
5-minute setup
GDPR & HIPAA ready
17+ PII types detected
Source
PostgreSQL / MongoDB / S3
Discover
PII scan + classification
Transform
Mask / Hash / Tokenize
Validate
Schema & quality checks
Sink
Warehouse / Data lake / API

Connect to your entire data stack

PostgreSQL
PostgreSQL
MySQL
MySQL
MariaDB
MariaDB
MongoDB
MongoDB
Snowflake
Snowflake
Redshift
Redshift
BigQuery
BigQuery
Databricks
Databricks
ClickHouse
ClickHouse
Elasticsearch
Elasticsearch
SQL Server
SQL Server
Azure SQL
Azure SQL
Redis
Redis
Cassandra
Cassandra
DynamoDB
DynamoDB
Neo4j
Neo4j
CouchDB
CouchDB
Firebase
Firebase
FerretDB
FerretDB
CosmosDB
CosmosDB
Atlas
Atlas
How DBShield Works

Scan. Detect. Transform. Deliver.

A complete ETL engine for PII compliance, from raw database to masked destination in seven deterministic steps.

01 / 07Source

Connect

Point DBShield at any supported database: PostgreSQL, MySQL, MongoDB, Snowflake, BigQuery, SQL Server and more. Credentials are encrypted and never stored in plaintext.

Connect
Scan
Detect
Decide
Pipeline
Script
Sink
CDC: In-Flight ProcessingReal-time

DBShield polls your source using a watermark column (updated_at) to detect new and changed records. Each change event flows through the transform script immediately, with masked data arriving at the sink within milliseconds.

Polling users WHERE updated_at > :watermark…
3 changed records detected
Transform script applied (email → mask, ssn → hash)
Written to sink in 12 ms
Script PlaygroundAuto-generated

DBShield generates a transformation script in the right dialect for your database: PostgreSQL trigger, MySQL stored proc, MongoDB JS function, Snowflake UDF. Edit and test on sample rows before enabling the pipeline.

-- PostgreSQL (auto-generated)
UPDATE users SET
email = LEFT(email, 2) || '***@***.***',
ssn = 'sha256:' || ENCODE(SHA256(ssn::BYTEA), 'hex'),
phone = LEFT(phone, 3) || '-***-****';

Built for production compliance

Every guarantee, out of the box.

Zero PII leakage

Sensitive data is transformed before it ever leaves the pipeline. Nothing raw reaches the sink.

3 M+ rows / second

Vectorised batch engine and in-flight CDC processing handle enterprise-scale data volumes without slowdown.

17+ PII types detected

ML + regex detects emails, phones, SSNs, credit cards, names, addresses, IPs, passports and custom patterns.

GDPR, HIPAA, PCI-DSS ready

Pre-built compliance policy templates and audit logs with immutable append-only records.

Real-time CDC stream

Watermark polling detects new and changed records. Each event is transformed and forwarded to the sink instantly.

Auto-generated scripts

Transformation scripts are generated per DB dialect (SQL triggers, UDFs, or JS functions) so the logic lives where your data does.

What's new:
ERD ViewerNew
Inline Cell EditingNew
Oracle ConnectorNew
SQL Server ConnectorNew
AI Query ProfilerUpdated
17+ PII TypesUpdated

Bring Your Own AI

Connect any major LLM using your own API key, encrypted at rest, called directly from your account.

OpenAI

OpenAI

GPT-4o · GPT-4 Turbo

Anthropic

Anthropic

Claude 3.5 Sonnet

Gemini

Gemini

1.5 Pro · 2.0 Flash

Grok / xAI

Grok / xAI

grok-beta · grok-2

AWS Bedrock

AWS Bedrock

Claude on Bedrock

Mistral

Mistral

mistral-large · small

Ollama

Ollama

Local / self-hosted

Works with your identity provider

Okta
Okta
Microsoft Entra
Microsoft Entra
Google Workspace
Google Workspace
Auth0
Auth0
GitHub
GitHub
Apple
Apple
ETL & Data Pipelines

Extract. Transform. Load.

A complete ETL and ELT pipeline builder: connect any database, apply masking and transformation rules, and deliver clean data to any destination in batch, scheduled, or real-time CDC mode.

Extract

Connect to any source. Credentials are encrypted at rest, never stored in plaintext.

PostgreSQLMongoDBMySQLSQL ServerOracleSnowflakeBigQueryDatabricksElasticsearchRedisMariaDBClickHouseCockroachDBS3

Transform

Apply masking, type casting, field mapping, and custom business rules, auto-generated per DB dialect.

  • PII masking: mask, hash, tokenize, encrypt
  • Field mapping & type casting
  • Auto-generated SQL triggers & UDFs
  • JavaScript transform functions (MongoDB)
  • Snowflake UDFs & Python lambdas
  • Custom regex & rule-based transforms
  • Schema validation before delivery

Load

Write masked data to any destination. Choose batch, cron-scheduled, or real-time CDC delivery.

  • Any SQL or NoSQL database
  • Snowflake & BigQuery data warehouses
  • Amazon S3 & Azure Blob Storage
  • HTTPS webhook endpoints
  • Real-time CDC: millisecond latency
  • Watermark polling for incremental loads
  • 3M+ rows/sec throughput

Pipeline execution modes

Instant

Run once on demand: import, snapshot, or backfill use cases.

Scheduled

Cron-based batch ETL: hourly, daily, or custom intervals.

CDC Streaming

Change Data Capture: detect and forward each row change in real time.

Watermark Poll

Incremental load via updated_at watermark: low-latency near-real-time.

Why teams choose Forge over Fivetran, Airbyte or Matillion

Unlike standalone ETL tools, Forge combines your pipeline builder, database IDE, PII discovery engine, and compliance reporting in a single workspace, so your data never has to leave your control, and your team never has to context-switch between five tools.

DBShield: Live Demo

See exactly how DBShield finds and masks your sensitive data

Click "Run Scan" on a live sample database table. Watch as the engine detects PII in real time, then choose a masking strategy to see the protected output instantly.

production.users · 2,847,293 rows
id
name
email
phone
ssn
card
1Alice Johnsonalice@acme.com+1-555-0101482-73-92814532 1234 5678 9012
2Bob Martinezbob@corp.io+1-555-0182319-44-76225412 7534 1290 8801
3Carol Whitecarol@startup.dev+1-555-0264751-02-33443782 8224 6310 005

Masking Method

Critical PII (SSN, Credit Card)
High (Email, Phone)
Medium (Name, Address)
Full Platform

Replace 10 point solutions with one platform

PII scanner, data masking, ETL pipelines, SQL/MQL IDE with AI profiler, server monitor, script debugger, schema migration, compliance automation, all in one enterprise workspace.

Autonomous PII Discovery

Scan PostgreSQL, MySQL, MongoDB, Snowflake, Redshift, and 15+ other sources. Detect 17+ PII types (SSN, PHI, credit cards, emails) using ML-assisted regex hybrid classification.

Dynamic Masking Engine

Format-preserving encryption, SHA-256 hashing, opaque tokenization, consistent pseudonymization, and AI-generated synthetic data. Apply rules at field, column, or table level.

IntelliShell SQL/MQL Editor

Browser-native editor with syntax highlighting, Format SQL, a visual Explain tool, and AI code completion. Execute queries live against any connected database.

AI Query Profiler

Automatically surface slow queries, visualize execution plans (index scan vs. seq scan), and receive AI-generated index recommendations with estimated improvement percentages.

Real-Time Server Monitor

Live-updating dashboards for CPU, memory, active connections, replication lag, WiredTiger cache, and ops/sec, across every connection simultaneously.

Interactive Script Debugger

Set breakpoints in MongoDB shell scripts, step over/into/out of functions, inspect live variable values, and trace call stacks, entirely in the browser.

Test Data Generator

Generate realistic fake data using 20+ field types: names, emails, UUIDs, dates, enums, booleans. 5 built-in templates: Users, Orders, Products, Events, IoT Sensors.

SQL → MQL Converter

Translate standard SQL (SELECT, JOIN, GROUP BY, INSERT, UPDATE, DELETE) into MongoDB Query Language, with a plain-English explanation of each conversion.

Snippet Library

25+ production-ready code snippets across CRUD, Aggregation, Index, Admin, Date, and Text categories. Search by name or tag, star favorites, insert into shell with one click.

MongoDB Log Parser

Paste raw MongoDB log output and instantly parse into a filterable table. Filter by severity (INFO/WARN/ERROR/FATAL), component, search text, or slow-query threshold.

Task Scheduler

Define recurring MongoDB jobs with cron expressions. Visual cron builder, per-task timeout, run-now button, and full execution history with output logs.

Data Visualization

Visualize query results as bar, line, area, or pie charts directly from any collection view. Configure X/Y axis, aggregation function, and export to PNG.

SQL → NoSQL Migration Wizard

5-step guided wizard to migrate relational schemas to MongoDB. Map SQL columns to Mongo fields and types, with live row-count progress tracking during migration.

Schema & Index Manager

Modify database schemas and manage performance indexes directly from the IDE. Reschema columns, add composite indexes, and validate before applying to production.

Privacy-Aware ETL Pipelines

Build pipelines that natively understand PII. Source → Discover → Transform → Validate → Sink, all in a visual drag-and-drop flow with 3M+ rows/sec throughput.

Connection Tree + PII Navigator

Visual schema browser across all your databases. PII-tagged fields show lock icons with risk level. Environment labels (prod / staging / dev) prevent accidental data exposure.

Immutable Audit Trail

Every query, scan, masking action, and data movement is logged to an append-only audit store. Tamper-evident records with one-click compliance exports for GDPR, HIPAA, and PCI auditors.

DSR & Compliance Automation

Automate GDPR Right to Erasure, CCPA data requests, and HIPAA access workflows across your entire infrastructure. Unified compliance posture updated in real time.

ERD Viewer

Visual entity-relationship diagram for every connected database. Inspect foreign keys, cardinality, and PII-flagged fields. Generated automatically from your live schema, with no manual drawing required.

Inline Cell Editing

Edit cells directly in the Collection View without writing SQL. Click any value to edit in place, with data-type validation and change preview before committing.

Oracle & SQL Server Connectors

First-class support for Oracle 19c+ (CONNECT BY, NVL, analytic functions) and Microsoft SQL Server (T-SQL, window functions). PII scan and masking work identically across all engines.

DBStudio

Query, explore, and visualize, without leaving your browser

DBStudio is a full-featured data IDE built directly into the platform. No more switching between pgAdmin, DataGrip, Tableau, and five other tools; everything you need is in one browser tab.

  • IntelliShell: SQL/MQL editor with syntax highlighting, Format, and live query execution
  • AI Query Profiler: detect slow queries, visualize execution plans, get AI index recommendations
  • Server Monitor: live CPU, memory, connections, and ops/sec dashboards
  • Script Debugger: breakpoints, step-through, variable watch, and call-stack inspection
  • SQL → MQL Converter: translate SQL to MongoDB Query Language with plain-English explanations
  • Snippet Library: 25+ production-ready snippets. Search, star, insert into shell.
  • Test Data Generator: generate realistic test data using 20+ field types and 5 built-in templates
  • Data Visualization: bar, line, area, pie charts from any query result in one click
DB Forge Studio / acme-production● connected
Explorer
acme-production
public
UUIDid
TEXTname
TEXTemail
TEXTphone
TEXTstatus
TSTZcreated_at
IntelliShell·acme-production · public
SELECT u.id, u.name, u.email, u.phone,
SUM(o.total) AS lifetime_value
FROM users u
JOIN orders o ON o.user_id = u.id
WHERE u.status = 'active'
GROUP BY u.id
LIMIT 500;
Press Run to execute query
Database-Specific IDE Experience

Native syntax for every database

IntelliShell adapts to the database you're connected to. Switch between SQL dialects and MQL, with DB-specific syntax, function hints, and PII masking built in.

IntelliShell: PostgreSQLSQL
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
-- PostgreSQL: window functions + JSONB
SELECT
  u.id,
  u.name,
  u.email,            -- ⚠ PII: auto-masked
  u.region,
  jsonb_extract_path_text(u.meta, 'tier') AS tier,
  COUNT(*) OVER (PARTITION BY u.region)   AS region_peers,
  RANK()   OVER (PARTITION BY u.region
                  ORDER BY u.created_at DESC) AS recency_rank
FROM users u
WHERE u.status = 'active'
  AND u.created_at >= NOW() - INTERVAL '90 days'
ORDER BY u.region, recency_rank
LIMIT 50;
PII fields auto-masked before results are returned

PostgreSQL highlights

  • JSONB & arrays
  • Window functions
  • CTEs & lateral joins
  • PII masking

Also available

  • ERD Viewer
  • Query Profiler
  • DBShield
  • Schema Migration
  • Inline Cell Edit
Open Studio
DBStudio: 8 Pro Tools

Try every tool. Live. Right here.

DBStudio ships 8 professional database tools beyond the SQL editor. Click each tab to see an interactive demo.

Server Monitor

Interactive

Live CPU, memory, connections, and ops/sec with auto-updating charts refreshed every 2 seconds.

CPU
34%
Memory
62%
Conns
47
Ops/s
420
CPU % · last 12 ticks● LIVE
Version
PostgreSQL 16.2
Uptime
14d 6h 23m
Cache
93% hit rate
Teams & DB Access Control

Share database access without sharing passwords

Stop distributing raw DB credentials in Slack. Create scoped access profiles, group users into teams, and grant access in one click, or revoke it just as fast.

DB Forge · Access Control
New Access Profile
NameAnalysts Read-Only
DB Userreadonly_user
Password••••••••
Collectionsusers, orders, events
PermissionsRead only

Zero credential sprawl

DB passwords live in one encrypted place. No more shared `.env` files, Slack messages, or spreadsheet credential sheets.

Team-based provisioning

Add a new analyst to the Data Analysts team and they immediately inherit all the DB access that team already has; nothing else to configure.

Granular, revocable access

Restrict access to specific tables or collections per profile. Remove someone from a team and their DB access is gone instantly, with no DB password changes needed.

Least-privilege by default

Create read-only profiles for analysts, read-write for engineers. Users can only touch what their profile explicitly allows.

Full audit trail

Every grant, revoke, profile creation, and team membership change is logged immutably, ready for your next compliance review.

Works with every connector

Access profiles work across PostgreSQL, MySQL, MongoDB, SQL Server, Oracle, Snowflake and every other connector with one consistent access model.

Before DB Forge Access Control
  • Sharing raw DB passwords over Slack or email
  • New hire waits 3 days for a DBA to create a DB account
  • Offboarding requires changing shared passwords
  • No record of who accessed which database or when
  • Everyone uses the same admin credentials
  • Accidental access to production tables you didn't mean to expose
With DB Forge Teams & Access Profiles
  • Credentials stay encrypted on the server, never shared
  • New hire added to the right team gets DB access in seconds
  • Remove from team = instant revoke, no password rotation
  • Immutable audit log of every access grant and revoke
  • Named profiles with exactly the permissions your role needs
  • Collections/tables scoped per profile; analysts never touch prod writes
Compliance Automation

Prove compliance in minutes, not months

Stop hunting logs across 10 systems. DB Forge gives you a unified, auditor-ready compliance posture, updated in real time as you scan, mask, and move data.

  • Automated DSR workflows for GDPR & CCPA
  • PHI detection and masking for HIPAA
  • Immutable audit logs ready for auditors
  • Credit card tokenization for PCI-DSS
  • One-click compliance export for auditors
84%
GDPR
35/42 controls passing
67%
HIPAA
36/54 controls passing
91%
PCI-DSS
35/38 controls passing
43%
SOC 2
26/61 controls passing
78%
ISO 27001
Certified Nov 2024
89%
CCPA
Fully automated DSR
3B+
Records scanned monthly
99.99%
Uptime SLA
17+
PII types auto-detected
12
Platform capabilities
Transparent Pricing

Plans for every scale

Start free, scale as you grow. No surprise fees. Upgrade or downgrade anytime.

Switch to yearly and save up to 10%

Starter

$29/user/mo
Up to 5 users
or $27/user/mo billed annually
DBShield
DBShield
PII auto-discovery
Data masking (regex, hash, synthetic)
Visual pipeline builder
Compliance reports (GDPR, HIPAA, PCI)
REST API + API keys
Immutable audit logs
DBStudio
IntelliShell + Query Profiler
Server Monitor + Log Parser
SQL → MQL Converter + Snippet Library
Test Data Generator
Data Visualization (charts)
Script Debugger + Task Scheduler
Add-ons
Advanced masking (tokenization, FPE)
Data lineage
Custom connectors
SSO (OIDC)
Custom SSO (SAML / Ping Identity)
SQL → NoSQL migration wizard
Priority support
Self-hosted / private cloud
Most Popular

Growth

$49/user/mo
Up to 25 users
or $47/user/mo billed annually
DBShieldDBStudio
DBShield
PII auto-discovery
Data masking (regex, hash, synthetic)
Visual pipeline builder
Compliance reports (GDPR, HIPAA, PCI)
REST API + API keys
Immutable audit logs
DBStudio
IntelliShell + Query Profiler
Server Monitor + Log Parser
SQL → MQL Converter + Snippet Library
Test Data Generator
Data Visualization (charts)
Script Debugger + Task Scheduler
Add-ons
Advanced masking (tokenization, FPE)
Data lineage
Custom connectors
SSO (OIDC)
Custom SSO (SAML / Ping Identity)
SQL → NoSQL migration wizard
Priority support
Self-hosted / private cloud

Professional

$79/user/mo
Up to 50 users
or $66/user/mo billed annually
DBShieldDBStudio
DBShield
PII auto-discovery
Data masking (regex, hash, synthetic)
Visual pipeline builder
Compliance reports (GDPR, HIPAA, PCI)
REST API + API keys
Immutable audit logs
DBStudio
IntelliShell + Query Profiler
Server Monitor + Log Parser
SQL → MQL Converter + Snippet Library
Test Data Generator
Data Visualization (charts)
Script Debugger + Task Scheduler
Add-ons
Advanced masking (tokenization, FPE)
Data lineage
Custom connectors
SSO (OIDC)
Custom SSO (SAML / Ping Identity)
SQL → NoSQL migration wizard
Priority support
Self-hosted / private cloud
Best Value

Business

$149/user/mo
Up to 100 users
or $143/user/mo billed annually
DBShieldDBStudio
DBShield
PII auto-discovery
Data masking (regex, hash, synthetic)
Visual pipeline builder
Compliance reports (GDPR, HIPAA, PCI)
REST API + API keys
Immutable audit logs
DBStudio
IntelliShell + Query Profiler
Server Monitor + Log Parser
SQL → MQL Converter + Snippet Library
Test Data Generator
Data Visualization (charts)
Script Debugger + Task Scheduler
Add-ons
Advanced masking (tokenization, FPE)
Data lineage
Custom connectors
SSO (OIDC)
Custom SSO (SAML / Ping Identity)
SQL → NoSQL migration wizard
Priority support
Self-hosted / private cloud
Custom

Enterprise

Custom
Unlimited users
Custom SLA · self-hosted option
DBShieldDBStudio
DBShield
PII auto-discovery
Data masking (regex, hash, synthetic)
Visual pipeline builder
Compliance reports (GDPR, HIPAA, PCI)
REST API + API keys
Immutable audit logs
DBStudio
IntelliShell + Query Profiler
Server Monitor + Log Parser
SQL → MQL Converter + Snippet Library
Test Data Generator
Data Visualization (charts)
Script Debugger + Task Scheduler
Add-ons
Advanced masking (tokenization, FPE)
Data lineage
Custom connectors
SSO (OIDC)
Custom SSO (SAML / Ping Identity)
SQL → NoSQL migration wizard
Priority support
Self-hosted / private cloud
Ready in 5 minutes

Your entire data platform, ready in 5 minutes

Join 400+ engineering and data teams who use Forge to discover PII, build ETL pipelines, and query databases with AI assistance, all in one place.

Get in touch

We'd love to hear from you

Whether you're evaluating Forge, need help with an existing account, or want to discuss enterprise pricing; our team is here.

Sales
Talk to our team about plans, pricing, and custom enterprise arrangements.
Support
Existing customer? Our engineers will help you get back on track fast.
General
Partnerships, press, or just a hello; we read every message.

Send us a message

By submitting you agree to our Privacy Policy. We never sell your data.