| Data Safe | Y
| Y
| Y
| Y
| Includes up to 1 million free audit records per database per month with storage for up to seven years. If the 1 million records per month limit is exceeded, there is a small fee for excess audit consumption. |
| Control privileged users, including DBAs (Database Vault) | Y
| Y
| Y
| Y
| BaseDB requires High Performance edition |
| SQL Firewall (Database Vault) | Y
| Y
| Y
| Y
| BaseDB requires High Performance edition |
| Label-based mandatory access control at the row level (Label Security) | Y
| Y
| Y
| Y
| BaseDB requires High Performance edition |
| Real Application Security | Y
| Y
| Y
| Y
| |
| Virtual Private Database | Y
| Y
| Y
| Y
| |
| Transparent Data Encryption (TDE) for Tablespaces (Advanced Security) | Y
| Y
| Y
| Y
| |
| Ability to Set the Default Tablespace Encryption Algorithm (Advanced Security) | Y
| Y
| N
| Y
| |
| Transparent Data Encryption (TDE) for Columns (Advanced Security) | Y
| Y
| Y
| Y
| |
| Data Redaction (Advanced Security) | Y
| Y
| Y
| Y
| BaseDB requires High Performance edition |
| Keystore for Each Pluggable Database (Advanced Security) | Y
| Y
| N
| Y
| |
| Sharing of TDE Master Encryption Key Across Oracle Processes (Advanced Security) | Y
| Y
| Y
| Y
| |
| Encrypted Data Pump exports (Advanced Security) | Y
| Y
| Y
| Y
| |
| Control and manage encryption keys (Key Vault) | Y
| Y
| Y
| Y
| |
| Install and operate within this cloud (Key Vault) | Y
| Y
| N
| Y
| Product license required, install in Azure is supported. |
| Control and manage encryption keys (Azure Key Vault) | Y
| Y
| Y
| Y
| |
| Centrally Managed Users | Y
| Y
| Y
| Y
| |
| Enterprise User Security | Y
| Y
| N
| Y
| |
| OCI IAM Authentication | N
| N
| N
| N
| |
| Microsoft EntraID Authenticaiton | Y
| Y
| Y
| Y
| |
| Local user MFA using OCI IAM | Y
| Y
| N
| Y
| |
| Local user MFA using Cisco DUO | Y
| Y
| N
| Y
| |
| Collect audit data for analysis, alerting, and reporting (Audit Vault and Database Firewall) | Y
| Y
| Y
| Y
| Collect audit data for analysis, alerting, and reporting |
| Assess security posture and user risk. Detect configuration and entitlement drift (Audit Vault and Database Firewall) | Y
| Y
| Y
| Y
| Configuration and entitlement assessment with drift detection and alerting |
| Audit Vault and Database Firewall: Install natively in this cloud (Audit Vault and Database Firewall) | N
| N
| N
| N
| Cannot be installed in Azure, but if installed in a supported cloud (OCI, AWS) or on-premises can work with databases running in Azure |
| Unified Auditing | Y
| Y
| Y
| Y
| |
| Fine-grained Auditing | Y
| Y
| Y
| Y
| |
| Privilege Analysis | Y
| Y
| Y
| Y
| |
| Transparent Sensitive Data Protection | Y
| Y
| Y
| Y
| |