PGDSAT

What PGDSAT is

PGDSAT is a Linux tool for assessing security across PostgreSQL clusters, checking around 90 controls. Its coverage includes every recommendation in the CIS Benchmark for PostgreSQL 17, along with additional checks for installation and patches, permissions, logging and auditing, access control, connections, settings, replication, and other configuration considerations. Some checks run automatically, while others require manual review. Assessments produce a status summary and detailed findings in text or HTML, with report output available in English, French, or Chinese. Command-line options can select or exclude databases, remove checks, set a report title, and choose format and language. The tool queries PostgreSQL through psql and includes checks for pgAudit and pgBackRest configuration. PGDSAT is free software under GPLv3 and intended for on-premises use. It requires PostgreSQL 10 or later, PostgreSQL binaries on PATH, connection details provided through environment variables or command-line options, and Perl bignum. It uses curl and internet access for an online PostgreSQL version check, though that check can be disabled. The README says to run it as the postgres system user so it can inspect the installation and system.