No. 20 of 23 ·Database Vulnerability Scanners

PGDSAT

Linux

Visit site Alternatives

Freedom report

No signalScore 5.1

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedThinly documented

PGDSAT is ranked #20 of 23 in database vulnerability scanners on Freedom251. It runs on Linux.

Compared on database vulnerability scanners

Free plan: Yes
Deployment: on-premises
Privilege analysis: Yes
Compliance templates: Yes

Best PGDSAT alternatives

See all 20

One bar Defensia Database Security Free tier No. 1€9/mo6.4 One bar Onam Database Security Free tier No. 2$22/mo6.4 One bar Oracle Cloud Infrastructure Secret Management Free tier No. 3Free6.4 No signal Qualys External Attack Surface Management Paid plans No. 4—6.4 One bar SQLTriage Free tier No. 5Free6.4 One bar DBX Free tier No. 6Free6.3

The record

Purpose: PGDSAT is a PostgreSQL security assessment tool that checks around 90 security controls on PostgreSQL clusters.
CIS checks: The tool implements all recommendations from the CIS Benchmark for PostgreSQL 17, along with additional checks.
Assessment output: It produces a summary of test statuses and detailed findings, with text and HTML output formats.
Automation: The tool supports automated assessments to verify company security policies and identify security issues a cluster may face.
Check coverage: Checks cover installation and patches, file permissions, logging and auditing, access control, connections, settings, replication, and special configuration considerations.
Manual checks: The listed checks include manual checks as well as checks performed automatically by the tool.
Requirements: PGDSAT requires PostgreSQL 10 or later and PostgreSQL binaries available through PATH.
Execution: The README says to run PGDSAT as the postgres system user because it needs privileges to inspect the system and PostgreSQL installation.
Internet requirement: The tool uses curl and internet access to check PostgreSQL versions online, with an option to disable that check.
Report customization: Command-line options can select databases, exclude databases, remove checks, set a report title, and choose output format and language.
License: PGDSAT is distributed as free software under the GPLv3 license.
Provider: The repository identifies HexaCluster Corp as the copyright holder for 2024–2026 and links to HexaCluster's website.
Maker location: HexaCluster lists addresses in Toronto, Canada and Dubai, UAE.

Where it ranks on Freedom251

Best Database Vulnerability Scanners in 2026#20 of 23

Is PGDSAT yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote PGDSAT

Sources

github.com/HexaCluster/pgdsat· checked 7 Oct 2026
hexacluster.ai· checked 7 Oct 2026