1. A computer system for securing a remote database, comprising: one or more processors; and memory, comprising instructions executable by the one or more processors to cause the computer system to at least: receive, by a database access system, a request to generate a field in a database; select a key to associate with the field, the key inaccessible to a database engine responsible for the database, and the key accessible to the database access system; prepare underlying fields in the database in place of the field, the underlying fields comprising an encrypted data field and a protected range field, the encrypted data field encrypted based at least in part on the key, and the protected range field comprising a range segment that represents a range of encrypted data values within the encrypted data field; and maintain a list to respond to a query for the range of the encrypted data values, the list associating a range of values within the field with the range segment representing the range of encrypted data values within the encrypted data field, the list generated based at least in part on a request for the range of values within the field.