Validates and enforces TLS/SSL on database connections at startup.
Throws a descriptive error if the connection is not encrypted,
preventing insecure deployments from reaching production.
Covers ~54 compliance frameworks including:
GDPR Art 32, HIPAA, PCI DSS, NIST SP 800-53, FedRAMP, SOC 2,
ISO 27001, NYDFS 23 NYCRR 500, HITRUST, NIS2, DORA, and more.
Usage:
const prorm = new Prorm({ ... });
TLSEnforcer.enforce(prorm); // strict
TLSEnforcer.enforce(prorm, { mode: 'warn' }); // log only
TLSEnforcer.enforce(prorm, { allowLocal: true }); // skip for localhost
TLSEnforcer
Validates and enforces TLS/SSL on database connections at startup. Throws a descriptive error if the connection is not encrypted, preventing insecure deployments from reaching production.
Covers ~54 compliance frameworks including: GDPR Art 32, HIPAA, PCI DSS, NIST SP 800-53, FedRAMP, SOC 2, ISO 27001, NYDFS 23 NYCRR 500, HITRUST, NIS2, DORA, and more.
Usage: const prorm = new Prorm({ ... }); TLSEnforcer.enforce(prorm); // strict TLSEnforcer.enforce(prorm, { mode: 'warn' }); // log only TLSEnforcer.enforce(prorm, { allowLocal: true }); // skip for localhost