DBX vs LevelBlue AppDetectivePRO
DBX
dbxray.co
LevelBlue AppDetectivePRO
levelblue.comSide by side
| Figure | DBX | LevelBlue AppDetectivePRO |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 2 | 3 |
| Spec score · Database Vulnerability Scanners | 8.9 (#2) | 8.3 (#5) |
| Credential handling | Submitted database credentials are sent to server-side functions over TLS, are not rendered back to the browser, and are not written to logs or analytics events. | Cached scan credentials are protected with Windows Data Protection API and removed when the application closes. |
| Support | Security issues can be reported to [email protected] with reproduction steps, and DBX says it will acknowledge receipt and provide investigation updates. | The iTnews review reported phone support from 9 a.m. to 9 p.m. EST, password-protected web support and fast email responses, with extra support available for a fee. |
| What it does | DBX analyzes PostgreSQL and Supabase security metadata to show how database objects can be reached. | AppDetectivePRO scans databases and big-data stores for vulnerabilities, configuration errors, access-control problems, missing patches and risky combinations of settings. |
Plans
LevelBlue AppDetectivePRO
- AppDetectivePRO 30-Day TrialFree
- Complimentary single-license trialFree
- AppDetectivePro offering (iTnews review)Priced on request
In their own words
DBX
DBX is a web-based security analysis tool for PostgreSQL and Supabase databases. It examines how identities can reach database objects through RLS policies, grants, functions, storage, relationships, and tenant boundaries. DBX inspects live security objects and uses a deterministic rule engine and permission graph to evaluate practical access. It groups individual weaknesses into attack paths and reports severity, confidence, and evidence. Each deterministic finding includes a proposed migration linked to the relevant object, with an expected security effect and compatibility risk. The snapshot contains catalog metadata, including schemas, policies, grants, routines, and relationships, but no database rows. DBX says its snapshot workflow requires no database password, persistent connection, agent, or production write access; scanning is designed for a dedicated least-privilege role with catalog permissions. A language model explains verified findings and drafts remediation for human review. DBX does not test application code, network controls, or client authorization logic, and it makes no compliance certification claims. Free unlimited introspection is available; Full Remediation costs $195, paid once.
LevelBlue AppDetectivePRO
LevelBlue AppDetectivePRO scans databases and big data stores for configuration errors, access-control issues, missing patches, and risky settings that could lead to compromise. It assesses databases on premises or in the cloud and supports discovery, assessment, and reporting on security, risk, or compliance posture. LevelBlue says the product has more than 50 built-in policies and 12 annual knowledge-base updates. SpiderLabs experts contribute vulnerability research to that knowledge base, and policies can be customized. Supported datastore examples include Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata. Licensing depends on the number and type of databases, with a licensed unit defined for each platform; pricing is available on request. A 30-day trial is offered. The trial license excludes some filtering or customization features, and technical support is unavailable during the trial. An evaluation without an evaluation license is limited to one scanned asset and one built-in policy, then stops running 30 days after first opening.