1. A method, comprising: defining, for a data masking engine executing in a platform as a service (PaaS) based software environment, one or more data masking rules; detecting, by the data masking engine, data processed by a software application executing within the PaaS based software environment and in accordance with a given data masking rule; and performing, by the data masking engine, a data masking operation on the data.