Life & fun · alternatives · 2026
24 alternatives to Enforce Access Policies on Postgres
Inspektor is a protocol-aware proxy that is used to enforce access policies👮 - inspektor-dev/inspektor
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Enforce Access Policies on Postgres launched in 2022; newer entries below may have overtaken it.
- 1
postgres.new▲774The in-browser Postgres sandbox with AI assistance
2024 · database.build · its alternatives →
- 2

- 3
InsForge▲622We built InsForge because we wanted to use pure prompts to build a production-grade app faster. In practice, AI isn’t reliable enough when generating code or configuring backend pieces like schema, RLS, auth, or functions. Postgres MCP and Supabase MCP are a good starting point, but they felt more like API wrappers for agents than something designed to guide AI safely through backend tasks. So we built our own MCP server on top of Postgres and added a set of context-engineering tools to make prompt-driven workflows more predictable. It gradually turned into a Postgres-based BaaS. Key…
Mar 2026 · insforge.dev · its alternatives →
- 4

hey hn, supabase ceo here this is a postgres connection pooler. it’s similar to pgbouncer, but built with Elixir and specifically designed for multi-tenancy. it’s still under development, but it’s at a stage where we can gather a feedback from the community and you can try it yourself. we aren’t using this in production yet, but aiming to deploy it for a subset of databases in the next 2 months. We have the following benchmarks (details in the readme): - Elixir Cluster maintaining 400 connections to a single Postgres database - 1_000_000 clients connecting to the Elixir cluster - Sending…
2023 · github.com · its alternatives →
- 5

Hey HN! Lev and Justin here, authors of PgDog (https://pgdog.dev/), a connection pooler, load balancer and database sharder for PostgreSQL. If you build apps with a lot of traffic, you know the first thing to break is the database. We are solving this with a network proxy that works without requiring application code changes or database migrations. Our post from last year: https://news.ycombinator.com/item?id=44099187 The most important update: we are in production. Sharding is used a lot, with direct-to-shard queries (one shard per query) working pretty much…
Feb 2026 · github.com · its alternatives →
- 6

In-memory Postgres for unit/E2E tests. Contribute to hexclave/pgmock development by creating an account on GitHub.
2024 · github.com · its alternatives →
- 7

It's time we talked about something many developers, data analysts, and even web application servers are guilty of: downgrading PostgreSQL connection security. Too often, we see connections dropped from full TLS verification to "any TLS" (i.e., sslmode=require) or, even worse, plain text connections. Why? Because most cloud providers, like AWS or Google Cloud SQL, use non-public Certificate Authorities for PostgreSQL. The result? Unverified TLS connections because no one has time to set up all devices across an organization to trust custom certificate authorities. And here's the most…
2024 · github.com · its alternatives →
- 8

- 9

pg_netstat is a Postgres extension to monitor database network traffic. It uses libpcap to capture packets and aggregates at user-specified interval.
2022 · github.com · its alternatives →
- 10

PostgreSQL pooler with sharding, load balancing and failover support. - postgresml/pgcat
2022 · github.com · its alternatives →
- 11

A high-performance Postgres replication engine written in Rust. Embed it in your Rust application or run it as a standalone binary. - supabase/etl
2024 · github.com · its alternatives →
- 12

sql-tap is a transparent proxy that captures SQL queries by parsing the PostgreSQL/MySQL wire protocol and displays them in a terminal UI. You can run EXPLAIN on any captured query. No application code changes needed — just change the port.
Feb 2026 · github.com · its alternatives →
- 13

Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes. - ayarotsky/diesel-guard
Dec 2025 · github.com · its alternatives →
- 14

A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon
2017 · github.com · its alternatives →
- 15

CipherStash Proxy keeps your sensitive data in PostgreSQL encrypted and searchable, without changing your SQL queries. It is written in Rust, uses a formally type-check SQL mapper and searchable encryption.
2025 · cipherstash.com · its alternatives →
- 16

Originally inspired by pg_regress, pg_yregress provides a TAP-compatible test executor that allows for better test organization, easier instance management, native JSON handling and so on.
2023 · github.com · its alternatives →
- 17
Postquel▲70A fast, native PostgreSQL client for macOS, with an AI assistant that uses the Claude Code, Codex or Cursor account already on your Mac.
17d ago · frizky.dev · its alternatives →
- 18

Hey HN, I built pg-mcp, a Model Context Protocol (MCP) server for PostgreSQL that provides structured schema inspection and query execution for LLMs and agents. It's multi-tenant and runs over HTTP/SSE (not stdio) Features - Supports multiple database connections from multiple agents - Schema Introspection: Returns table structures, types, indexes and constraints; enriched with descriptions from pg_catalog. (for well documented databases) - Read-Only Queries: Controlled execution of queries via MCP. - EXPLAIN Tool: Helps smart agents optimize queries before execution. - Extension…
2025 · github.com · its alternatives →
- 19

This is like 4 years old, but I’m braver now and ready to share stuff with this community. I’ve been a lurker for a while. I made this tool - it’s kind of like “explain” but it tells you about what locks would be required by the query. I was making it as part of a larger tool that would try to prevent deadlocks during migrations at my last company, I never finished it.
2023 · github.com · its alternatives →
- 20

Easy postgres codebase injection - aka postgres non data live reload - oelmekki/pgrebase
2016 · github.com · its alternatives →
- 21

SQL Firewall Extension for PostgreSQL. Contribute to uptimejp/sql_firewall development by creating an account on GitHub.
2015 · github.com · its alternatives →
- 22

Hi HN, I'm Jiasheng, co-creator of ZenStack. Access control usually ends up scattered across app code instead of living with the data model — and that's riskier when the code is written by an agent, since it's easy to ship a query with a missing or incomplete authorization check. ZenStack enforces policy (RBAC/ABAC/relation-based) directly at the ORM layer, on top of Kysely, so every query gets checked the same way regardless of who wrote it and who is calling it. Postgres RLS is an option too, but it's hard to maintain and scale, and it's Postgres-only — ZenStack's approach is…
Jul 2026 · zenstack.framer.website · its alternatives →
- 23

hey hn, I’m Filipe, a developer at supabase we have three projects using Elixir in a clustered setup. we’ve always used libcluster[0] to achieve it but ended up using multiple strategies. now we’ve converged into one approach for all our projects using Postgres as the coordinator. we’re using Postgres LISTEN and NOTIFY commands with Postgrex as the system to propagate node addresses so they can connect plus we use it to send healtcheck pings to heal when required. big thanks to https://twitter.com/gotbones for the libcluster library and…
2023 · github.com · its alternatives →
- 24VP
# TL;DR We built VeilStream, a drop-in, read-only PostgreSQL proxy that strips, masks, or anonymizes sensitive values as queries stream through. In less than two minutes, you can put a proxy in front of a PostgreSQL database, whether hosted on your laptop, Neon, Supabase, or a cloud provider, and the user is able to start configuring filter rules. The use cases we're trying to solve are: - Production-like data in development environments - Improve incident handling by masking all data that is not relevant - Share a subset of your data - Protecting data being shipped into a data lake - Safe…
2025 · app.veilstream.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →