No. 16 of 23 ·Database Vulnerability Scanners

SQLTriage

Web · Windows · Self-hosted

Freedom report

One barScore 5.2

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely2 of 6 device platforms
DocumentedThinly documented

SQLTriage is ranked #16 of 23 in database vulnerability scanners on Freedom251. It runs on Self-hosted, Web, Windows. There is a free plan.

SQLTriage plans and pricing

All plans

Free Free All features · no per-server fees · no subscription · no feature tiers sqladrian.github.io · 5 Oct 2026

Compared on database vulnerability scanners

Free plan: Yes
Deployment: on-premises
Compliance templates: Yes
Agentless scanning: Yes
Remediation guidance: Yes

Best SQLTriage alternatives

See all 20

One bar Defensia Database Security Free tier No. 1€9/mo6.4 One bar Onam Database Security Free tier No. 2$22/mo6.4 One bar Oracle Cloud Infrastructure Secret Management Free tier No. 3Free6.4 No signal Qualys External Attack Surface Management Paid plans No. 4—6.4 One bar DBX Free tier No. 5Free6.3 One bar Omega DB Scanner Standalone Free tier No. 6Free6.3

The record

Purpose: SQLTriage audits SQL Server and maps findings to compliance controls with cited evidence and a board-ready PDF.
Checks: The site describes 576+ checks covering security, performance, configuration, and high availability, backup, and recovery.
Frameworks: The site lists mappings for NIST 800-53, CIS Benchmarks, DISA STIG, ISO 27001, SOC 2, PCI-DSS, and HIPAA.
Monitoring: Companion views include live sessions, blocking chains, query plans, wait stats, dashboards, and alerting.
Read-only assessment: Assessment checks query DMVs without installing an agent or changing SQL Server schema; separate opt-in deployment and remediation pages can write changes.
Security: The repository says the app is local-only by default with no telemetry, phone-home, or cloud dependency, and supports optional Azure Blob export.
Credentials: The repository says SQL passwords are encrypted at rest with AES-256-GCM and DPAPI.
Integrations: The site says users can connect with Windows Auth, SQL Auth, or Azure AD, and that SQLWATCH is useful for long-term historical dashboards.
Azure SQL support: Azure SQL Managed Instance is fully supported; Azure SQL Database has partial support, with checks requiring server-level DMV access skipped automatically.
Limits: The repository describes SQL Server as the supported database and says hosted SaaS dashboards are not offered.
Support: The repository directs bug reports and feature requests to GitHub Issues and community questions to GitHub Discussions.
Intended users: The site names senior DBAs, database consultants, InfoSec and compliance teams, and CIOs as intended users.
License: SQLTriage is offered under GNU GPL v3, with free commercial use and modifications required to remain open.
Price from: Free

Where it ranks on Freedom251

Best Database Vulnerability Scanners in 2026#16 of 23

Is SQLTriage yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SQLTriage

Sources

sqladrian.github.io/SQLTriage/· checked 5 Oct 2026
github.com/SQLAdrian/SQLTriage· checked 5 Oct 2026
sqladrian.github.io/SQLTriage· checked 5 Oct 2026