MongoDB

MongoDB’s flexibility is exactly why it’s worth scanning: documents in the same collection can have completely different shapes, and a field nobody declared can quietly start carrying personal data.

What you need to connect

Either an Atlas cluster host or an on-premises host and port, plus a username and password (or no credentials for an unauthenticated deployment). read on the databases you want scanned is enough.

Advanced options cover the rest of the real world: authentication mechanism and source database, replica set, TLS, direct connection, and any additional driver arguments.

What Classifyre reads

One asset per collection, whose content is a sample of real documents. Because the sample is of documents rather than a declared schema, fields that only appear in some documents are still seen.

Scope by database and by collection, with allow- and denylists, a per-database collection cap, and a switch for system collections.

Metadata on every asset

Lineage

Worth knowing

• Reads are non-blocking. Only find and count operations are issued; nothing is written and no index is built.
• A secondary replica is a fine target if you’d rather keep the scan off the primary.

Configuration

Beyond the fields below, every source also has the settings shared by all of them: the sampling strategy, the detectors to run, the scan schedule, and the compute limits for its scan jobs.

Required

Without these, the source will not save.

This section depends on which authentication method you pick — one of the following applies.

Secrets

Stored encrypted and never shown again after you save them. See Configuration & Fields.

This section depends on which authentication method you pick — one of the following applies.

Optional

Everything you can tune. Sensible defaults apply when you leave them alone.