Tech riderRev. 30 Sept 2026
- 1Runs onWeb
- 2CostsFree plan
- 3Cloud databasesYes
- 4Privilege analysisYes
- 5Agentless scanningYes
- 6Remediation guidanceYes
6 lines stated Written from the maker's own pages: dbxray.co
Overview
DBX is ranked #8 of 23 in database vulnerability scanners on Specifiction. It runs on Web. There is a free plan.
DBX plans and pricing
All plansDatabase Scan Free Free Unlimited Introspection Introspect unlimited schemas · View database topology & score · See finding counts and severity · Local analysis (data never leaves browser) dbxray.co · 30 Sept 2026
Full Remediation $195 once Introductory Launch Price Includes 5 unique scans · Exact vulnerability details · Complete attack path graphs · Copy-paste SQL remediation · Verify fixes after remediation dbxray.co · 30 Sept 2026
Compared on database vulnerability scanners
Facts
- What it does
- DBX reconstructs how a PostgreSQL or Supabase database can actually be reached across RLS policies, grants, functions, storage, relationships, and tenant boundaries.dbxray.co · 30 Sept 2026
- Analysis method
- DBX introspects live security objects and resolves what each identity can reach in practice.dbxray.co · 30 Sept 2026
- Findings
- DBX connects individual weaknesses into attack paths and reports severity and confidence with evidence.dbxray.co · 30 Sept 2026
- Remediation
- Each deterministic finding includes a proposed migration tied to the object that produced it, with expected security effect and compatibility risk.dbxray.co · 30 Sept 2026
- Data handling
- The security snapshot contains catalog metadata such as schemas, policies, grants, routines, and relationships, but never database rows.dbxray.co · 30 Sept 2026
- Access model
- DBX states that it requires no database password, persistent connection, agent, or production write access for its snapshot workflow.dbxray.co · 30 Sept 2026
- Scanner permissions
- The scanner is designed for a dedicated least-privilege database role requiring CONNECT, schema USAGE, and SELECT on catalog views.dbxray.co · 30 Sept 2026
- Credential handling
- Submitted database credentials are sent to server-side functions over TLS, are not rendered back to the browser, and are not written to logs or analytics events.dbxray.co · 30 Sept 2026
- Methodology
- A deterministic rule engine evaluates introspected facts and a permission graph, while a language model only explains verified findings and drafts remediation for human review.dbxray.co · 30 Sept 2026
- Limitations
- DBX does not test application code, network controls, or client authorization logic and makes no compliance certification claims.dbxray.co · 30 Sept 2026
- Supported platforms
- DBX lists Supabase, PostgreSQL, Neon, AWS, GCP, Azure, Render, and DigitalOcean under its platform links.dbxray.co · 30 Sept 2026
- Support
- Security issues can be reported to [email protected] with reproduction steps, and DBX says it will acknowledge receipt and provide investigation updates.dbxray.co · 30 Sept 2026
- Intended users
- DBX is positioned for developers and teams building PostgreSQL or Supabase applications, including multi-tenant systems and AI-generated SQL workflows.dbxray.co · 30 Sept 2026
Best DBX alternatives
See all 12 All accessCh 01 Qualys External Attack Surface Management Free trialAPILinux 7.4 All accessCh 02 Defensia Database Security Free planFree trialLinux from €9/mo7.3 All accessCh 03 Onam Database Security Free planFree trialAPI from $22/mo7.2 All accessCh 04 Rapid7 Surface Command Free trialAPILinux 7.1 All accessCh 05 Trellix Data Loss Prevention APIMac 7.1 All accessCh 06 Oracle Cloud Infrastructure Secret Management Free planAPIWeb Free to start6.9
Where it ranks on Specifiction
Is DBX yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- dbxray.co· checked 30 Sept 2026
- dbxray.co/trust· checked 30 Sept 2026