Skip to content
SPECIFICTION
Get listed

PGDSAT

github.com

Linux
Visit github.com
Spec score 6.9 #16 of 27 in Database Vulnerability Scanners

Spec sheet

Purpose
PGDSAT is a PostgreSQL security assessment tool that checks around 90 security controls on PostgreSQL clusters.Read 7 Oct 2026 · github.com
Integrations
The tool uses psql to query the PostgreSQL cluster and includes checks for pgAudit and pgBackRest configuration.Read 7 Oct 2026 · github.com
License
PGDSAT is distributed as free software under the GPLv3 license.Read 7 Oct 2026 · github.com
Assessment areas
Its checks cover installation and patches, permissions, logging and auditing, access, connections, PostgreSQL settings, replication, and configuration considerations.Read 7 Oct 2026 · github.com
Assessment output
It produces a summary of test statuses and detailed findings, with text and HTML output formats.Read 7 Oct 2026 · github.com
Automated assessment
The README says the tool can automate assessments to verify company security policies and help identify security issues a cluster may face.Read 7 Oct 2026 · github.com
Automation
The tool supports automated assessments to verify company security policies and identify security issues a cluster may face.Read 7 Oct 2026 · github.com
Check coverage
Checks cover installation and patches, file permissions, logging and auditing, access control, connections, settings, replication, and special configuration considerations.Read 7 Oct 2026 · github.com
CIS checks
The tool implements all recommendations from the CIS Benchmark for PostgreSQL 17, along with additional checks.Read 7 Oct 2026 · github.com
CIS coverage
The project says it implements all CIS Benchmark recommendations for PostgreSQL 17, along with additional checks.Read 7 Oct 2026 · github.com
Dependencies and limits
The documented requirements include PostgreSQL binaries on PATH, connection details supplied through environment variables or command-line options, and Perl bignum; an internet connection is used for the PostgreSQL version check unless that check is disabled.Read 7 Oct 2026 · github.com
Execution
The README says to run PGDSAT as the postgres system user because it needs privileges to inspect the system and PostgreSQL installation.Read 7 Oct 2026 · github.com
Internet requirement
The tool uses curl and internet access to check PostgreSQL versions online, with an option to disable that check.Read 7 Oct 2026 · github.com
Languages
Report output supports en_US, fr_FR, and zh_CN.Read 7 Oct 2026 · github.com
Maintainer
The README lists Gilles Darold as the author.Read 7 Oct 2026 · github.com
Maker location
HexaCluster lists addresses in Toronto, Canada and Dubai, UAE.Read 7 Oct 2026 · hexacluster.ai
Maker locations
HexaCluster lists addresses in Toronto, Canada, and Dubai, UAE.Read 7 Oct 2026 · hexacluster.ai
Manual checks
The listed checks include manual checks as well as checks performed automatically by the tool.Read 7 Oct 2026 · github.com
PostgreSQL requirement
PGDSAT requires PostgreSQL 10 or later.Read 7 Oct 2026 · github.com
Provider
The repository identifies HexaCluster Corp as the copyright holder for 2024–2026 and links to HexaCluster's website.Read 7 Oct 2026 · github.com
Report customization
Command-line options can select databases, exclude databases, remove checks, set a report title, and choose output format and language.Read 7 Oct 2026 · github.com
Reports
It generates a summary of test statuses and detailed findings, with text and HTML output formats.Read 7 Oct 2026 · github.com
Requirements
PGDSAT requires PostgreSQL 10 or later and PostgreSQL binaries available through PATH.Read 7 Oct 2026 · github.com

Where Specifiction places it

Alternatives to PGDSATAll alternatives →