Banks and financial institutions where contractors and vendors access customer databases.
Zero Trust Privileged Access & Database Activity Monitoring
mamori.io
Control who reaches your databases, what they see and what they can do — down to the SQL statement, with every session recorded.
Solution overview
About mamori.io
mamori.io delivers Privileged Access Management (PAM) and Database Activity Monitoring (DAM) built on Zero Trust principles, focused on controlling access to databases and servers without shared credentials.
Every connection is identity-verified with SSO and 2FA, so you can trace who did what, when and from which device — with session recording and playback plus an SQL firewall that allows or blocks statements by policy.
Deployment is agentless and requires no changes to existing servers, directories or databases (Docker-based), which keeps rollout fast and low-risk — a good fit for PDPA and access-control requirements.
No agentnothing to install, nothing to change on existing systems
3levels of access logging for audit and forensics
Free tierfree edition for organisations up to 20 users (vendor terms)
Key capabilities
Key capabilities
SSO and 2FA across RDP, SSH and direct database connections — every session tied to a verified identity, no shared credentials.
Just-in-time access with approval workflows (automatic, single approver or multi-role) and time-bound expiry.
Session recording and playback with three levels of logging: connection log, query session log and query object access log.
SQL/NoSQL firewall that allows or blocks statements by policy — for example permitting SELECT while blocking bulk DELETE or INSERT.
Database activity monitoring with behavioural analytics that flags bulk data extraction, mass deletion or privilege escalation, alerts stakeholders and can lock the device.
Data masking and encryption to protect personal data under PDPA.
Agentless deployment with no changes to existing servers, directories or databases (Docker-based).
Reduces the manual burden of access-control requirements for ISO 27001 (A.9) and internal audit.
Products Soft IT delivers
M4PAM — Privileged Access ManagementM4DAM — Database Activity MonitoringM4IP — Zero Trust Network AccessSQL FirewallData masking & encryptionApproval workflowSession recording & playback
Why work with Soft IT
A Bangkok-based team consulting and supporting in Thai and English
Proof of concept and evaluation in your own environment before you commit
Structured deployment, integration, training and handover
Annual support with licence renewal management
25+ years working with banks, telcos, energy companies, state enterprises, retailers, manufacturers and healthcare providers
Learn more
Who it fits
Who it fits
Organisations still using shared administrator accounts that need personal identities with 2FA.
Controlling and evidencing access to personal data for PDPA and forensic investigations.
Insider-threat protection against unauthorised changes or deletion in critical systems.
Product details and figures shown are published by the vendor and are provided for evaluation only.
Related partners
Related partners
Unified Security & Observability Data Platform (SIEM / SOAR / AIOps)
Splunk (a Cisco company)
Turn machine data from every system into real-time security and IT operations answers.
Splunk EnterpriseSplunk Cloud PlatformSplunk Enterprise Security (SIEM)
Database Observability, Data Resilience & Identity Security
Quest Software
See and fix database performance across every platform while protecting identity and data.
Quest FoglightQuest ToadQuest SharePlex
PostgreSQL Performance Monitoring & Tuning
pganalyze
Query-level insight for PostgreSQL: find missing indexes, analyse execution plans and fix problems before users feel them.
pganalyze (SaaS)pganalyze Enterprise ServerIndex Advisor
Interested in this solution?
Book a demo — our engineers will assess your environment.