DBX review
A focused, agentless scanner for analyzing database permissions and access paths.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
DBX is a browser-based database security scanner for engineers and teams building PostgreSQL and Supabase applications, particularly multi-tenant systems. It analyzes security metadata across row-level security policies, grants, functions, storage, relationships, and tenant boundaries. The product is designed for read-only catalog introspection and can run locally in a browser without database passwords, agents, or production write access.
The free Database Scan plan costs 0 USD as a one-time price and includes unlimited schema introspection, database topology and scoring, finding counts and severity, and local browser analysis. Its standout capability is permission analysis: DBX validates row-level security, examines grants, reconstructs attack paths, and produces deterministic findings with supporting evidence. Security scoring helps summarize the database posture, while browser-based SQL security linting adds a focused review layer. The Full Remediation plan adds five unique scans, exact vulnerability details, attack path graphs, copy-paste SQL remediation, and fix verification.
DBX suits teams that want a focused view of database permissions and tenant-boundary risks without deploying an agent or granting production write access. Its narrow PostgreSQL and Supabase orientation is an advantage for those ecosystems, but organizations needing a broader database or platform-security scope should consider an alternative with wider coverage. The product also states that it makes no compliance certification claims, so it should be treated as a technical analysis and remediation aid rather than a compliance certification tool.
DBX pros and cons
- Where it wins
- Free scan includes schema introspection, scoring, and severity findings
- Reconstructs attack paths across grants, policies, functions, and relationships
- Provides evidence-backed findings and copy-paste SQL remediation
- Where it doesn't
- Focused on PostgreSQL and Supabase database security metadata
- Web-only access may not suit teams seeking broader platform coverage
- Full Remediation is a separate paid tier with five unique scans
DBX fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update