Dev tools · alternatives · 2026

24 alternatives to Roast my SQLite encryption at-rest

SQLite encryption at-rest is a hot requested feature of both the “default” CGo driver [1] and the transpiled alternative driver [2]. So, this is a feature I wanted to bring to my own Wasm based Go driver/bindings [3]. Open-source SQLite encryption extensions have had a troubled last few years. For whatever reason, in 2020 the (undocumented) feature that made it easy to offer page-level encryption was removed [4]. Some solutions are stuck with SQLite 3.31.1, but Ulrich Telle stepped up with a VFS approach [5]. Still, their solution seemed harder than something I'd want to maintain, as it…

This is a WebAssembly-based Go driver and bindings for SQLite that adds encryption-at-rest functionality. The maker implemented full disk encryption using Adiantum tweakable encryption to protect SQLite databases… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Roast my SQLite encryption at-rest launched in 2024; newer entries below may have overtaken it.

1
My Go SQLite driver did poorly on a benchmark, so I fixed it▲234
https://github.com/ncruces/go-sqlite3 was doing poorly on this benchmark that was posted yesterday to HackerNews [1]. With the help of some pprof, I was able to trace it to a serious performance regression introduced two weeks ago, and come up with the fix (happy to field questions, if you're interested in the nitty gritty). It's not the fastest driver around, but it's no longer the slowest: comfortably middle of the pack. It's based on a WASM build of SQLite, and thanks to https://wazero.io doesn't need CGO. [1]:…
2023 · github.com · its alternatives →
2
(bits) of a Libc, Optimized for Wasm▲78
I make a no-CGO Go SQLite driver, by compiling the amalgamation to Wasm, then loading the result with wazero (a CGO-free Wasm runtime). To compile SQLite, I use wasi-sdk, which uses wasi-libc, which is based on musl. It's been said that musl is slow(er than glibc), which is true, to a point. musl uses SWAR on a size_t to implement various functions in string.h. This is fine, except size_t is just 32-bit on Wasm. I found that implementing a few of those functions with Wasm SIMD128 can make them go around 4x faster. Other functions don't even use SWAR; redoing those can make them 16x faster.…
2025 · github.com · its alternatives →
3
Google Drive to SQLite▲305
Here's the repo: https://github.com/simonw/google-drive-to-sqlite The README is using a trick I'm increasingly leaning on: parts of that document - the --help output and the example database schema - are automatically generated using Cog: https://nedbatchelder.com/code/cog and https://til.simonwillison.net/python/cog-to-update-help-in-r...
2022 · simonwillison.net · its alternatives →
4
Reduce SQLite database size by up to 80% with transparent compression▲420
Transparent dictionary-based row-level compression for SQLite - phiresky/sqlite-zstd
2022 · github.com · its alternatives →
5
Securely Handle Encryption Keys in Go▲119
Software sandbox for storage of sensitive information in memory. - awnumar/memguard
2017 · github.com · its alternatives →
6
Sqinn-Go is a Golang library for accessing SQLite databases in pure Go▲113
Golang SQLite without cgo. Contribute to cvilsmeier/sqinn-go development by creating an account on GitHub.
2023 · github.com · its alternatives →
7
Turbolite – a SQLite VFS serving sub-250ms cold JOIN queries from S3▲185
I built a SQLite VFS in Rust that serves cold queries directly from S3 with sub-second performance, and often much faster. It’s called turbolite. It is experimental, buggy, and may corrupt data. I would not trust it with anything important yet. I wanted to explore whether object storage has gotten fast enough to support embedded databases over cloud storage. Filesystems reward tiny random reads and in-place mutation. S3 rewards fewer requests, bigger transfers, immutable objects, and aggressively parallel operations where bandwidth is often the real constraint. This was explicitly inspired…
Mar 2026 · github.com · its alternatives →
8GA
Goqite, a persistent message queue Go library built on SQLite▲99
I wanted to build a persistent message queue based on SQLite, because that's what I'm using for my main state anyway. This gives me ACID across state and messaging, which is nice! I've been inspired by the terminology of AWS SQS for this, but it's obviously much simpler. Maybe you can use it too. :)
2024 · goqite.com · its alternatives →
9
Data Prism – Weekly newsletter about data science, ML, AI and analytics▲233
DataPrism turns the clouds you already use into sovereign, provable, unreadable storage. Client-side encryption, one TypeScript SDK, invisible to your users.
2017 · dataprism.co · its alternatives →
10
Distributed SQLite on FoundationDB▲150
Hello HN! I'm building mvsqlite, a distributed variant of SQLite with MVCC transactions, that runs on FoundationDB. It is a drop-in replacement that just needs an `LD_PRELOAD` for existing applications using SQLite. I made this because Blueboat (https://github.com/losfair/blueboat) needs a native SQL interface to persistent data. Apparently, just providing a transactional key-value store isn’t enough - it is more easy and efficient to build complex business logic on an SQL database, and it seems necessary to bring a self-hostable distributed SQL DB onto the platform.…
2022 · github.com · its alternatives →
11SA
SlikSafe – A decentralized, end-to-end encrypted alternative to Dropbox▲284
Hey folks, We are the team behind Slik. Over the past year, we have been hacking on SlikSafe [1] a Dropbox alternative where all your data is first encrypted on your own device and then stored on decentralized storage. Some features we're most excited about are - - multi-device data sync, - auto-backups via desktop apps, - search your docs by name or contents with end-to-end encryption, - easy sharing via email, QR-code or private-link, - Password-less login using MetaMask/Phantom We leverage storage providers IPFS and Storj for global redundancy, reliability, and immutability. You can…
2021 · its alternatives →
12KA
Keycat – A self-hosted end-to-end encrypted password manager▲87
2019 · key.cat · its alternatives →
13
hat.sh▲212
Free, fast, secure and serverless file encryption
2019 · hat.sh · its alternatives →
14
MongoDB Protocol for SQLite▲147
A truly Open Source MongoDB alternative. Contribute to FerretDB/FerretDB development by creating an account on GitHub.
2023 · github.com · its alternatives →
15LS
log-shuttle – log delivery over HTTPs written in Go▲71
2013 · log-shuttle.io · its alternatives →
16
A new stdlib for Golang focusing on platform native support▲154
No gc, No goroutines, Produces small binaries while using the unmodified official go toolchain, and comes with complete Web SDK (generated from w3c/webref). We are building `pcz` to provide a reimagination of Go the language, in an effort to make it suitable for all kinds of programming tasks, and currently you can use it to build efficient web applications in Go using the generated Web SDK (as shown with the live web demo[1]). The journey is just starting, any suggestions? or any critics? [1]: https://primecitizens.github.io/livedemos/10-plat-web/
2023 · github.com · its alternatives →
17
Versioning Filesystem for SQLite▲110
Versioning filesystem for Sqlite. Contribute to sudeep9/mojo development by creating an account on GitHub.
2022 · github.com · its alternatives →
18
Private, in-browser, CSV-SQL query runner using SQLite-WASM▲41
Upload CSV, and start querying, all locally without any data leaving your browser. Can handle large CSV's easily. Download query results once done. Uses sqlite-wasm binary.
2024 · csvsqltool.com · its alternatives →
19
Query SQLite files stored in S3▲160
Query SQLite files in S3 using s3fs. Contribute to litements/s3sqlite development by creating an account on GitHub.
2022 · github.com · its alternatives →
20
go-storage▲86
An application-oriented unified storage layer for Golang.
2021 · github.com · its alternatives →
21SC
sqlc – Compile SQL Queries to Type-Safe Go▲45
2019 · conroy.org · its alternatives →
22
A Wasm to Go Translator▲7
I've spent the past couple of weeks building a Wasm-to-Go translator. It supports a subset of Wasm useful enough to translate SQLite into 600k LoC (~20 MiB) of Go code. It already passes all of my Go SQLite driver's tests across the 20 platforms I support. Performance compared to https://wazero.io/ is a bit of a mixed bag: code that frequently crosses the Go-Wasm boundary improves, but code that spends most of its time in "Wasm land" doesn't. There's probably room for improvement (I'd love to hear your ideas), but this is also a testament to how good the wazero AOT compiler…
Feb 2026 · github.com · its alternatives →
23GA
gocryptfs, an aspiring successor to EncFS, now in v1.0▲20
Author of gocryptfs and co-maintainer of EncFS here. gocryptfs is a FUSE overlay filesystem for Linux like EncFS. But it is written from scratch in Go, uses modern crypto and fixes the security issues of EncFS while providing equivalent speed. Some of the key differences to EncFS are: * Just one security level roughly equivalent to EncFS "paranoia" mode, at the speed of "default" mode. * A design so simple it fits on one page ( this one: https://nuetzlich.net/gocryptfs/security/ ) * Explicit filesystem creation using "gocryptfs -init". No configuration prompts. *…
2016 · its alternatives →
24
gRPSQLite – A SQLite VFS for remote databases via gRPC▲16
A SQLite VFS for remote databases via gRPC. Contribute to danthegoodman1/gRPSQLite development by creating an account on GitHub.
2025 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →