PIGSTY

SEC

Auditing Logs, Enforce Passwords, Keep Secrets, TDE, SM Algorithm, Login Hooks, Log Erros, Extension White List

SEC category contains 26 PostgreSQL extensions.

IDExtensionPackageVersionDescription
7000passwordcheck_cracklibpasswordcheck3.1.0Strengthen PostgreSQL user password checks with cracklib
7010supautilssupautils2.9.2Extension that secures a cluster on a cloud environment
7020pgsodiumpgsodium3.1.9Postgres extension for libsodium functions
7030supabase_vaultpg_vault0.3.1Supabase Vault Extension
7040pg_session_jwtpg_session_jwt0.3.1Manage authentication sessions using JWTs
7050anonpg_anon2.1.1PostgreSQL Anonymizer (anon) extension
7060pg_tdepg_tde1.0pg_tde access method
7070pgsmcryptopgsmcrypto0.1.0PostgreSQL SM Algorithm Extension
7080pgauditpgaudit17.1provides auditing functionality
7090pgauditlogtofilepgauditlogtofile1.6.4pgAudit addon to redirect audit log to an independent file
7100pg_auth_monpg_auth_mon3.0monitor connection attempts per user
7110credcheckcredcheck3.0credcheck - postgresql plain text credential checker
7120pgcryptokeypgcryptokey0.85cryptographic key management
7130pg_jobmonpg_jobmon1.4.1Extension for logging and monitoring functions in PostgreSQL
7140logerrorslogerrors2.1.3Function for collecting statistics about messages in logfile
7150login_hooklogin_hook1.6login_hook - hook to execute login_hook.login() at login time
7160set_userset_user4.1.0similar to SET ROLE but with added logging
7170pg_snakeoilpg_snakeoil1.4The PostgreSQL Antivirus
7180pgextwlistpgextwlist1.17PostgreSQL Extension Whitelisting
7190pg_auditorpg_auditor0.2Audit data changes and provide flashback ability
7200sslutilssslutils1.4A Postgres extension for managing SSL certificates through SQL
7210nosetpg_noset0.3.0Module for blocking SET variables for non-super users.
7960sepgsqlsepgsql-label-based mandatory access control (MAC) based on SELinux security policy.
7970auth_delayauth_delay-pause briefly before reporting authentication failure
7980pgcryptopgcrypto1.3cryptographic functions
7990passwordcheckpasswordcheck-checks user passwords and reject weak password

passwordcheck_cracklib - 3.1.0

Strengthen PostgreSQL user password checks with cracklib

ExtensionWebsiteAttributes
Packagepasswordcheck
LOAD
RPMpasswordcheck_cracklib_$v*
DEBpostgresql-$v-passwordcheck-cracklib
LIB
Language
C
License
LGPL-2.1
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

supautils - 2.9.2

Extension that secures a cluster on a cloud environment

ExtensionWebsiteAttributes
Packagesupautils
LOAD
RPMsupautils_$v
DEBpostgresql-$v-supautils
LIB
Language
C
License
Apache-2.0
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgsodium - 3.1.9

Postgres extension for libsodium functions

ExtensionWebsiteAttributes
Packagepgsodium
LOAD
RPMpgsodium_$v*
DDL
DEBpostgresql-$v-pgsodium
LIB
Language
C
License
BSD 3-Clause
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

supabase_vault - 0.3.1

Supabase Vault Extension

ExtensionWebsiteAttributes
Packagepg_vault
RPMvault_$v*
DDL
DEBpostgresql-$v-vault
LIB
Language
C
License
Apache-2.0
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_session_jwt - 0.3.1

Manage authentication sessions using JWTs

ExtensionWebsiteAttributes
Packagepg_session_jwt
RPMpg_session_jwt_$v
DDL
DEBpostgresql-$v-pg-session-jwt
LIB
Language
Rust
License
Apache-2.0
TRUST
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

anon - 2.1.1

PostgreSQL Anonymizer (anon) extension

ExtensionWebsiteAttributes
Packagepg_anon
LOAD
RPMpg_anon_$v
DDL
DEBpostgresql-$v-pg-anon
LIB
Language
Rust
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_tde - 1.0

pg_tde access method

ExtensionWebsiteAttributes
Packagepg_tde
LOAD
RPMpg_tde_$v*
DDL
DEBpostgresql-$v-pg-tde
LIB
Language
C
License
MIT
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgsmcrypto - 0.1.0

PostgreSQL SM Algorithm Extension

ExtensionWebsiteAttributes
Packagepgsmcrypto
RPMpgsmcrypto_$v
DDL
DEBpostgresql-$v-pgsmcrypto
LIB
Language
Rust
License
MIT
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgaudit - 17.1

provides auditing functionality

ExtensionWebsiteAttributes
Packagepgaudit
LOAD
RPMpgaudit_$v*
DDL
DEBpostgresql-$v-pgaudit
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgauditlogtofile - 1.6.4

pgAudit addon to redirect audit log to an independent file

ExtensionWebsiteAttributes
Packagepgauditlogtofile
RPMpgauditlogtofile_$v*
DDL
DEBpostgresql-$v-pgauditlogtofile
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_auth_mon - 3.0

monitor connection attempts per user

ExtensionWebsiteAttributes
Packagepg_auth_mon
RPMpg_auth_mon_$v*
DDL
DEBpostgresql-$v-pg-auth-mon
LIB
Language
C
License
MIT
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

credcheck - 3.0

credcheck - postgresql plain text credential checker

ExtensionWebsiteAttributes
Packagecredcheck
RPMcredcheck_$v*
DDL
DEBpostgresql-$v-credcheck
LIB
Language
C
License
MIT
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgcryptokey - 0.85

cryptographic key management

ExtensionWebsiteAttributes
Packagepgcryptokey
RPMpgcryptokey_$v
DDL
DEBpostgresql-$v-pgcryptokey
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_jobmon - 1.4.1

Extension for logging and monitoring functions in PostgreSQL

ExtensionWebsiteAttributes
Packagepg_jobmon
RPMpg_jobmon_$v
DDL
DEBpostgresql-$v-pg-jobmon
LIB
Language
SQL
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

logerrors - 2.1.3

Function for collecting statistics about messages in logfile

ExtensionWebsiteAttributes
Packagelogerrors
RPMlogerrors_$v*
DDL
DEBpostgresql-$v-logerrors
LIB
Language
C
License
BSD 3-Clause
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

login_hook - 1.6

login_hook - hook to execute login_hook.login() at login time

ExtensionWebsiteAttributes
Packagelogin_hook
RPMlogin_hook_$v*
DDL
DEBpostgresql-$v-login-hook
LIB
Language
C
License
GPL-3.0
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

set_user - 4.1.0

similar to SET ROLE but with added logging

ExtensionWebsiteAttributes
Packageset_user
RPMset_user_$v*
DDL
DEBpostgresql-$v-set-user
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_snakeoil - 1.4

The PostgreSQL Antivirus

ExtensionWebsiteAttributes
Packagepg_snakeoil
LOAD
RPMpg_snakeoil_$v*
DEBpostgresql-$v-snakeoil
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgextwlist - 1.17

PostgreSQL Extension Whitelisting

ExtensionWebsiteAttributes
Packagepgextwlist
LOAD
RPMpgextwlist_$v*
DEBpostgresql-$v-pgextwlist
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pg_auditor - 0.2

Audit data changes and provide flashback ability

OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

sslutils - 1.4

A Postgres extension for managing SSL certificates through SQL

ExtensionWebsiteAttributes
Packagesslutils
RPMsslutils_$v*
DDL
DEBpostgresql-$v-sslutils
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

noset - 0.3.0

Module for blocking SET variables for non-super users.

ExtensionWebsiteAttributes
Packagepg_noset
LOAD
RPMnoset_$v*
DDL
DEBpostgresql-$v-noset
LIB
Language
C
License
AGPL-3.0
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

sepgsql - -

label-based mandatory access control (MAC) based on SELinux security policy.

ExtensionWebsiteAttributes
Packagesepgsql
LOAD
RPMpostgresql$v-contrib
DEBpostgresql-$v
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

auth_delay - -

pause briefly before reporting authentication failure

ExtensionWebsiteAttributes
Packageauth_delay
LOAD
RPMpostgresql$v-contrib
DEBpostgresql-$v
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

pgcrypto - 1.3

cryptographic functions

ExtensionWebsiteAttributes
Packagepgcrypto
RPMpostgresql$v-contrib
DDL
DEBpostgresql-$v
LIB
Language
C
License
PostgreSQL
TRUST
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13

passwordcheck - -

checks user passwords and reject weak password

ExtensionWebsiteAttributes
Packagepasswordcheck
LOAD
RPMpostgresql$v-contrib
DEBpostgresql-$v
LIB
Language
C
License
PostgreSQL
OS/Archx86_64aarch64
el8
17
16
15
14
13
17
16
15
14
13
el9
17
16
15
14
13
17
16
15
14
13
d12
17
16
15
14
13
17
16
15
14
13
u22
17
16
15
14
13
17
16
15
14
13
u24
17
16
15
14
13
17
16
15
14
13