Category: SEC

Strengthen PostgreSQL user password checks with cracklib

Extension that secures a cluster on a cloud environment

Postgres extension for libsodium functions

Transparent column-level encryption with encrypted_text and encrypted_bytea types

Experimental encrypted text search using AEAD ciphers and keyed blind indexes

Dynamically configurable PostgreSQL password complexity checks.

Supabase Vault Extension

Manage authentication sessions using JWTs

PostgreSQL Anonymizer (anon) extension

PostgreSQL SM Algorithm Extension

Encrypted postgres data type

provides auditing functionality

pgAudit addon to redirect audit log to an independent file

Opinionated PostgreSQL database auditor

Audit data changes and provide flashback ability

Function for collecting statistics about messages in logfile

monitor connection attempts per user

Extension for logging and monitoring functions in PostgreSQL

OAuth and OIDC token validator for PostgreSQL 18

PostgreSQL 18 OIDC bearer-token validator plugin written in Rust

Transaction-based audit trail with schema versioning

credcheck - postgresql plain text credential checker

cryptographic key management

Advanced password hashing methods for PostgreSQL

login_hook - hook to execute login_hook.login() at login time

similar to SET ROLE but with added logging

The PostgreSQL Antivirus

PostgreSQL Extension Whitelisting

DDL and utility command firewall for PostgreSQL

A Postgres extension for managing SSL certificates through SQL

X.509 certificate parsing and inspection through OpenSSL

Module for blocking SET variables for non-super users.

Block COPY commands via a configurable ProcessUtility hook

Agentic policy language for PostgreSQL with guardrails, guidance, and session-aware controls

Reject full partition scans that omit the partition key

SQL proposal, verification and execution gate with human approval for agent roles.

Percona pg_tde access method

Transparent Data Encryption for PostgreSQL through custom table and index access methods

label-based mandatory access control (MAC) based on SELinux security policy.

pause briefly before reporting authentication failure

cryptographic functions

checks user passwords and reject weak password