DBX

DBX is ranked #6 of 18 in database vulnerability scanners on The Geeks Club. It runs on Web. There is a free plan.

DBX plans and pricing

Database Scan Free Free Unlimited Introspection Introspect unlimited schemas · View database topology & score · See finding counts and severity · Local analysis (data never leaves browser) dbxray.co · 30 Sept 2026

Full Remediation $195 once Introductory Launch Price Includes 5 unique scans · Exact vulnerability details · Complete attack path graphs · Copy-paste SQL remediation · Verify fixes after remediation dbxray.co · 30 Sept 2026

Compared on database vulnerability scanners

Free plan: Yes
Cloud databases: Yes
Privilege analysis: Yes
Agentless scanning: Yes
Remediation guidance: Yes

Best DBX alternatives

See all 12

9.3 Onam Database Security Free plan

8.2 DataSunrise Free trial

8.2 LevelBlue AppDetectivePRO Free trial

8.2 Omega DB Scanner Standalone Free plan

7.7 SQLTriage Free plan

7.4 PGDSAT Free plan

DBX

What it does: DBX reconstructs how a PostgreSQL or Supabase database can actually be reached across RLS policies, grants, functions, storage, relationships, and tenant boundaries.
Analysis method: DBX introspects live security objects and resolves what each identity can reach in practice.
Findings: DBX connects individual weaknesses into attack paths and reports severity and confidence with evidence.
Remediation: Each deterministic finding includes a proposed migration tied to the object that produced it, with expected security effect and compatibility risk.
Data handling: The security snapshot contains catalog metadata such as schemas, policies, grants, routines, and relationships, but never database rows.
Access model: DBX states that it requires no database password, persistent connection, agent, or production write access for its snapshot workflow.
Scanner permissions: The scanner is designed for a dedicated least-privilege database role requiring CONNECT, schema USAGE, and SELECT on catalog views.
Credential handling: Submitted database credentials are sent to server-side functions over TLS, are not rendered back to the browser, and are not written to logs or analytics events.
Methodology: A deterministic rule engine evaluates introspected facts and a permission graph, while a language model only explains verified findings and drafts remediation for human review.
Limitations: DBX does not test application code, network controls, or client authorization logic and makes no compliance certification claims.
Supported platforms: DBX lists Supabase, PostgreSQL, Neon, AWS, GCP, Azure, Render, and DigitalOcean under its platform links.
Support: Security issues can be reported to [email protected] with reproduction steps, and DBX says it will acknowledge receipt and provide investigation updates.
Intended users: DBX is positioned for developers and teams building PostgreSQL or Supabase applications, including multi-tenant systems and AI-generated SQL workflows.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Database Vulnerability Scanners in 2026#6 of 18

Is DBX yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DBX

Sources

dbxray.co· checked 30 Sept 2026
dbxray.co/trust· checked 30 Sept 2026