nowfound

Dev tools · alternatives · 2026

24 alternatives to Pgspot – Find vulnerabilities in Postgres SQL scripts

Hi HN! My name is Sven, I am an engineer at Timescale and this is my fun side project. The main purpose of pgspot is to check postgres extension sql scripts for vulnerabilities but it can also be used to check functions outside of extension context e.g. security definer functions. I've started working on this after finding vulnerabilities in timescaledb to ensure similar vulnerabilities don't reappear. While working on this i found vulnerabilities in over 30 extensions and some of the findings even lead to postgres upstream changes to reduce attack surface of extension scripts (…

Pgspot is a Python-based security tool that scans PostgreSQL extension SQL scripts and security definer functions for vulnerabilities. It parses SQL code using libpg_query and analyzes the abstract syntax tree to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Pgspot – Find vulnerabilities in Postgres SQL scripts launched in 2024; newer entries below may have overtaken it.

  1. 1PE
  2. 2

    pg_netstat is a Postgres extension to monitor database network traffic. It uses libpcap to capture packets and aggregates at user-specified interval.

    2022 · github.com · its alternatives →

  3. 3

    Contribute to Z-Gort/Reservoirs-Lab development by creating an account on GitHub.

    2024 · github.com · its alternatives →

  4. 4

    PgQueuer is a Python job queue that uses PostgreSQL for everything — queue storage, locking, notifications. No Redis, no RabbitMQ, no separate broker to operate. If your app already has Postgres, you already have the broker. After ~2 years and 26 minor releases, 1.0 ships today as the first stable release. Strict semver from here on. Thanks to everyone who contributed and left feedback!

    2024 · github.com · its alternatives →

  5. 5

    Hey HN! Lev and Justin here, authors of PgDog (https://pgdog.dev/), a connection pooler, load balancer and database sharder for PostgreSQL. If you build apps with a lot of traffic, you know the first thing to break is the database. We are solving this with a network proxy that works without requiring application code changes or database migrations. Our post from last year: https://news.ycombinator.com/item?id=44099187 The most important update: we are in production. Sharding is used a lot, with direct-to-shard queries (one shard per query) working pretty much…

    Feb 2026 · github.com · its alternatives →

  6. 6

    SQL Firewall Extension for PostgreSQL. Contribute to uptimejp/sql_firewall development by creating an account on GitHub.

    2015 · github.com · its alternatives →

  7. 7

    This extension let's you write PRQL functions in PostgreSQL. When I first saw PRQL on Hacker News a few months ago, I was immediately captivated by the idea, yet equally disappointed that there was no integration for PostgreSQL. Having previous experience with writing PostgreSQL extensions in C, I thought this was a great opportunity to try out the pgrx framework and decided to integrate PRQL with PostgreSQL myself. The maintainers of both PRQL and pgrx were very nice to work with. Thanks guys.

    2024 · github.com · its alternatives →

  8. 8AU

    pgMustard is a Postgres EXPLAIN visualisation tool that also gives performance advice, scored based on its potential to speed up your query.

    2019 · pgmustard.com · its alternatives →

  9. 9

    A flamegraph generator for Postgres EXPLAIN ANALYZE output. - mgartner/pg_flame

    2019 · github.com · its alternatives →

  10. 10

    Hey HN, I built pg-mcp, a Model Context Protocol (MCP) server for PostgreSQL that provides structured schema inspection and query execution for LLMs and agents. It's multi-tenant and runs over HTTP/SSE (not stdio) Features - Supports multiple database connections from multiple agents - Schema Introspection: Returns table structures, types, indexes and constraints; enriched with descriptions from pg_catalog. (for well documented databases) - Read-Only Queries: Controlled execution of queries via MCP. - EXPLAIN Tool: Helps smart agents optimize queries before execution. - Extension…

    2025 · github.com · its alternatives →

  11. 11
    PgDog▲227

    Scale PostgreSQL without changing your app

    Jul 2026 · pgdog.dev · its alternatives →

  12. 12
    Opengrep▲340

    The open source code security engine

    2025 · opengrep.dev · its alternatives →

  13. 13

    PostgreSQL pooler with sharding, load balancing and failover support. - postgresml/pgcat

    2022 · github.com · its alternatives →

  14. 14

    Postgres.js - The Fastest full featured PostgreSQL client for Node.js, Deno, Bun and CloudFlare - porsager/postgres

    2022 · github.com · its alternatives →

  15. 15

    We like open source, we develop open source software, and we are very active and well known at Postgres community. We also develop custom products for clients, always around Postgres environment

    2020 · ongres.com · its alternatives →

  16. 16

    pgTyped - Typesafe SQL in TypeScript. Contribute to adelsz/pgtyped development by creating an account on GitHub.

    2020 · github.com · its alternatives →

  17. 17

    Try running a query anywhere from PostgreSQL to DuckDB without leaving your browser.

    2023 · codapi.org · its alternatives →

  18. 18

    This is an experimental extension for CRDTs, pg_crdt: GitHub repo[0]. It supports Yjs/Yrs and Automerge. The linked blog post [1] describes how we're thinking about this extension in a Supabase context. I want to emphasise this part: "pg_crdt has not been released onto the Supabase platform (and it may never be). We’re considering many options for offline-sync/support and, while CRDTs will undoubtedly factor in, we’re not sure if this is the right approach." [0] GitHub repo: https://github.com/supabase/pg_crdt [1] Blog post:…

    2022 · supabase.com · its alternatives →

  19. 19
    Simpl.▲330

    A pleasant Postgres browser for working with real data

    Jan 2026 · simpl.sh · its alternatives →

  20. 20

    pg_jsonschema is a solution we're exploring to allow enforcing more structure on json and jsonb typed postgres columns. We initially wrote the extension as an excuse to play with pgx, the rust framework for writing postgres extensions. That let us lean on existing rust libs for validation (jsonschema), so the extension's implementation is only 10 lines of code :) https://github.com/supabase/pg_jsonschema/blob/fb7ab09bf6050... happy to answer any questions!

    2022 · github.com · its alternatives →

  21. 21

    pglite-fusion is a PostgreSQL extension that allows you to embed SQLite databases into your PostgreSQL tables by enabling the creation of columns with the `SQLITE` type. This means every row in the table can have an embedded SQLite database. In addition to the PostgreSQL `SQLITE` type, pglite-fusion provides the `query_sqlite`` function for querying SQLite databases and the `execute_sqlite` function for updating them. Additional functions are listed in the project’s README. The pglite-fusion extension is written in Rust using the pgrx framework [1]. ---- Implementation Details The PostgreSQL…

    2024 · github.com · its alternatives →

  22. 22

    Hands-on tutorials to learn Postgres

    2022 · crunchydata.com · its alternatives →

  23. 23

    Originally inspired by pg_regress, pg_yregress provides a TAP-compatible test executor that allows for better test organization, easier instance management, native JSON handling and so on.

    2023 · github.com · its alternatives →

  24. 24

    PostgreSQL Docker images with the extensions you actually need -- pre-built, composable, no compilation. - pglayers/pglayers

    Jul 2026 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →