1. A method, comprising: providing a platform as a service (PaaS) software, including a plurality of software environments, on a computer; deploying a software application in one of the software environments of the PaaS software; executing a data masking engine in one of the software environments of the PaaS software, wherein the data masking engine monitors inbound or outbound traffic of the deployed software application, passing through endpoints of the software application, supplied by the PaaS software; defining, for the data masking engine, one or more data masking rules; detecting, by the data masking engine, data processed by the software application in accordance with a given data masking rule; and performing, by the data masking engine, a data masking operation on the detected data in accordance with the given data masking rule.