Observed arrival · 2026-09-21
Seclume Keeps JDBC Secrets off the Heap
A Java JDBC implementation for PostgreSQL, MySQL/MariaDB, SQL Server, and Oracle that routes database secrets through native memory.
- For
- Java teams handling database credentials and heap dumps
- Worth noticing
- Its test suite searches real heap dumps for the password and runs a negative control designed to fail.
Field notes
Seclume documents a credential path that avoids ordinary JVM objects: providers write secrets into native memory for the authentication handshake, followed by an overwrite. Its examples cover Spring Boot and plain DriverManager usage, while the stated test method launches a real connection in a separate JVM and inspects the resulting heap dump. The page also recommends integrated operating-system authentication where available, rather than presenting password handling as the only answer.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue