The control plane for every database you run
Monitor, secure, back up, and govern PostgreSQL, MySQL, MongoDB, SQL Server, Redis and more — across every environment, from one enterprise console with workspaces, RBAC, and an immutable audit trail.
One console for every database you run
Everything your data tier needs — nothing it doesn't
From live monitoring to point-in-time restore to compliance evidence, the whole operations lifecycle lives in a single, governed surface.
Multi-database fleet
Register and operate ten engines side by side from a single fleet view with live health, environment tags, and search.
Monitoring & alerting
Time-series metrics with rollups, threshold rules, and notifications to Slack, email, webhooks, PagerDuty, Teams and Opsgenie.
Query, session & log monitor
Long-running queries, live sessions, lock-contention chains (who is blocking whom), and real engine-native server logs (client-API or SSH) across the fleet — inspect and terminate offenders safely, every action audited.
Wait-event analysis (live + history)
See where the database spends time — every active session grouped by what it waits on (CPU, locks, I/O, LWLocks) from pg_stat_activity, live and over time, plus a "top SQL by wait" panel that attributes the waiting to the exact statements. Continuous Active Session History stacks waits across 1h/6h/24h and ranks the top waits, so you can diagnose a slowdown after it happened.
Composite health score + fleet leaderboard
One weighted 0–100 grade per database that synthesizes configuration, reliability, performance, maintenance, and availability signals — with a category breakdown and a ranked list of the exact issues behind every lost point. A fleet leaderboard ranks every database worst-first, and point-in-time snapshots let you diff a live assessment against an earlier one to prove what a change improved or regressed.
Replication & HA visibility
A visual primary/replica topology graph with per-member role, state, and lag straight from the engine — plus an HA-health badge that flags degraded clusters and single points of failure.
Query console & runners
Run ad-hoc SQL and CQL, use the dedicated MongoDB runner (shell + builder), or Explain a statement’s execution plan with optimization hints — with per-engine sample queries to get started and one-click CSV/JSON export of results — read-only by default, with a safety guard and per-run audit.
AI-assisted query analysis
Bring your own AI provider (Claude, OpenAI, Gemini, Grok, or any OpenAI-compatible endpoint) — configured by admins and stored encrypted, with models auto-discovered from your key — and get streaming, plain-language explanations of any query plus concrete optimizations and suggested indexes (one-click copy, or load straight into the editor), right in the console or one click from a long-running query in the Query Monitor.
Schema Explorer & object management
Browse the full object hierarchy of any database — tables, views, collections, indexes, procedures, functions, and sequences — across every engine, script any object back to its exact CREATE DDL, and make guarded, audited schema changes: drop or rename objects (type-to-confirm, never cascading), add / rename / drop columns, and create indexes.
Storage Insights & growth forecast
Per-object capacity breakdown — the largest tables and their indexes with total database size — plus continuous growth sampling that charts size over time and projects which table will fill your disk, and roughly when — and database size and growth-rate are alertable metrics, so you can page before a disk fills.
Configuration audit & fleet CIS posture
Assess each server against security, reliability, performance & observability best practices — TLS, durability (fsync), autovacuum, timeouts, weak password hashing, logging — with the current value, the recommended value, and why it matters. Findings map to CIS Benchmark domains, and a fleet-wide view aggregates open gaps per domain across every database and ranks connections by most findings first — the whole estate's compliance posture at a glance.
Database access control
Create, grant, and revoke database users and roles across engines — no hand-written, injection-prone SQL.
Backup & restore engine
Scheduled logical backups with retention, checksums, a watchdog, and one-click point-in-time restore into any target.
Immutable audit log
Every privileged action is recorded to an append-only log you can filter and export — enforced at the database level.
Compliance reporting
Map your audit trail to SOC 2 and ISO 27001 controls and export evidence as JSON, CSV, or PDF in a click.
Workspaces
Isolate dev, staging, and production under one organization — each with scoped connections, policies, and members.
Data-driven RBAC
Seven built-in roles plus custom roles and a live permission matrix enforce least privilege at the API, not just the UI.
Secrets & key management
AES-256-GCM at rest with a KeyProvider abstraction for HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault.
On-prem agent
A hardened, mTLS, auto-updating agent brokers the full toolset — health, sessions, logs, the complete assessment suite (wait events, storage, config audit, blocking, maintenance, EXPLAIN, composite health score), and schema DDL + object operations — to databases that never leave your network.
See your entire data tier in one pane
Live health, capacity, replication, slow queries, and active sessions across every engine and environment — with time-series rollups that stay fast at thousands of databases.
- Fleet dashboard with per-engine status
- Slow-query & session managers with safe kill
- Threshold alerting to six channel types
Backups and restores you can actually trust
Policy-driven scheduled backups with retention and checksums, a heartbeat watchdog that reaps stuck jobs, and an async restore workflow you can monitor live.
- 15+ storage targets incl. S3, Azure, GCS, SFTP, OAuth
- One-click restore into any target database
- Failure alerting with org-default fallback
Least privilege, proven
Data-driven RBAC enforced server-side, workspace-scoped membership, encrypted secrets, and an immutable audit trail that maps straight to your compliance frameworks.
- Seven roles + custom roles, two tiers
- Workspace confinement down to by-id access
- SOC 2 / ISO 27001 evidence export
Governance that auditors love, controls DBAs trust
Approval gates, just-in-time access, anomaly detection, PII masking, schema drift, and SIEM streaming — the enterprise controls most tools make you build yourself.
Approval workflows
Production restores and destructive changes require a second approver — separation of duties, enforced and fully audited.
Index Advisor
Turns captured slow queries into concrete index recommendations with ready-to-review DDL. Insight, never auto-applied.
Maintenance Advisor
Reads each engine's own statistics catalogs to surface bloat needing VACUUM, unused indexes, stale stats, and fragmentation — each with a ready-to-review SQL action, never auto-applied.
PII discovery & masking
Finds sensitive columns and masks them in query results for anyone without explicit unmasked access.
Anomaly detection
Smart alerts that fire on statistical deviation from a rolling baseline — no fixed thresholds to babysit.
Just-in-time access
Grant time-boxed role elevation that expires automatically. Least privilege without the friction of standing access.
Schema drift detection
Compare two databases — staging vs production — and see exactly what was added, removed, or changed.
Saved query library
Share and reuse vetted SQL snippets across the team, scoped to each workspace.
SIEM streaming
Stream the immutable audit trail to Splunk, Datadog, or any webhook in real time — plus a public status page.
Ten engines, one adapter contract
A clean adapter layer makes every database a first-class citizen — relational, document, key-value, wide-column and search.
Built for DBAs, security owners, and platform teams
Concrete outcomes, not buzzwords — here's what you can do on day one.
Consolidate the whole fleet
Retire a pile of one-off scripts and dashboards — ten engines, every environment, in one governed console.
Prove least privilege
Data-driven RBAC, workspace confinement, and an append-only audit trail that maps straight to SOC 2 and ISO 27001.
Restore with confidence
Policy-driven backups with checksums and a watchdog, plus an approval-gated restore you can monitor live.
Access without the friction
Just-in-time elevation that expires on its own, and approval workflows for the operations that matter.
Catch problems early
Anomaly-based alerting, slow-query and session managers, and PII discovery so sensitive data stays masked.
Run it your way
Self-host it, bring your own key management (Vault / KMS), and stream the audit log to your SIEM.
Bring every database under one roof
Spin up the console and connect your first database in minutes. No credit card, no agents to babysit.
SOC 2 & ISO 27001 aligned · Self-hosting available · AES-256-GCM at rest