DBX

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

DBX is ranked #7 of 22 in database vulnerability scanners on Inferse. It runs on Web. There is a free plan.

Compared on database vulnerability scanners

Free plan: Yesdbxray.co
Cloud databases: Yesdbxray.co
Privilege analysis: Yesdbxray.co
Agentless scanning: Yesdbxray.co
Remediation guidance: Yesdbxray.co

Facts

What it does: DBX reconstructs how a PostgreSQL or Supabase database can actually be reached across RLS policies, grants, functions, storage, relationships, and tenant boundaries.dbxray.co · 30 Sept 2026
Analysis method: DBX introspects live security objects and resolves what each identity can reach in practice.dbxray.co · 30 Sept 2026
Findings: DBX connects individual weaknesses into attack paths and reports severity and confidence with evidence.dbxray.co · 30 Sept 2026
Remediation: Each deterministic finding includes a proposed migration tied to the object that produced it, with expected security effect and compatibility risk.dbxray.co · 30 Sept 2026
Data handling: The security snapshot contains catalog metadata such as schemas, policies, grants, routines, and relationships, but never database rows.dbxray.co · 30 Sept 2026
Access model: DBX states that it requires no database password, persistent connection, agent, or production write access for its snapshot workflow.dbxray.co · 30 Sept 2026
Scanner permissions: The scanner is designed for a dedicated least-privilege database role requiring CONNECT, schema USAGE, and SELECT on catalog views.dbxray.co · 30 Sept 2026
Credential handling: Submitted database credentials are sent to server-side functions over TLS, are not rendered back to the browser, and are not written to logs or analytics events.dbxray.co · 30 Sept 2026
Methodology: A deterministic rule engine evaluates introspected facts and a permission graph, while a language model only explains verified findings and drafts remediation for human review.dbxray.co · 30 Sept 2026
Limitations: DBX does not test application code, network controls, or client authorization logic and makes no compliance certification claims.dbxray.co · 30 Sept 2026
Supported platforms: DBX lists Supabase, PostgreSQL, Neon, AWS, GCP, Azure, Render, and DigitalOcean under its platform links.dbxray.co · 30 Sept 2026
Support: Security issues can be reported to [email protected] with reproduction steps, and DBX says it will acknowledge receipt and provide investigation updates.dbxray.co · 30 Sept 2026
Intended users: DBX is positioned for developers and teams building PostgreSQL or Supabase applications, including multi-tenant systems and AI-generated SQL workflows.dbxray.co · 30 Sept 2026