One surface for the entire database lifecycle
Twelve capabilities that used to be a dozen tools and a pile of cron jobs — unified, governed, and engine-agnostic.
Multi-database fleet
Register and operate ten engines side by side from a single fleet view with live health, environment tags, and search.
Monitoring & alerting
Time-series metrics with rollups, threshold rules, and notifications to Slack, email, webhooks, PagerDuty, Teams and Opsgenie.
Query, session & log monitor
Long-running queries, live sessions, lock-contention chains (who is blocking whom), and real engine-native server logs (client-API or SSH) across the fleet — inspect and terminate offenders safely, every action audited.
Wait-event analysis (live + history)
See where the database spends time — every active session grouped by what it waits on (CPU, locks, I/O, LWLocks) from pg_stat_activity, live and over time, plus a "top SQL by wait" panel that attributes the waiting to the exact statements. Continuous Active Session History stacks waits across 1h/6h/24h and ranks the top waits, so you can diagnose a slowdown after it happened.
Composite health score + fleet leaderboard
One weighted 0–100 grade per database that synthesizes configuration, reliability, performance, maintenance, and availability signals — with a category breakdown and a ranked list of the exact issues behind every lost point. A fleet leaderboard ranks every database worst-first, and point-in-time snapshots let you diff a live assessment against an earlier one to prove what a change improved or regressed.
Replication & HA visibility
A visual primary/replica topology graph with per-member role, state, and lag straight from the engine — plus an HA-health badge that flags degraded clusters and single points of failure.
Query console & runners
Run ad-hoc SQL and CQL, use the dedicated MongoDB runner (shell + builder), or Explain a statement’s execution plan with optimization hints — with per-engine sample queries to get started and one-click CSV/JSON export of results — read-only by default, with a safety guard and per-run audit.
AI-assisted query analysis
Bring your own AI provider (Claude, OpenAI, Gemini, Grok, or any OpenAI-compatible endpoint) — configured by admins and stored encrypted, with models auto-discovered from your key — and get streaming, plain-language explanations of any query plus concrete optimizations and suggested indexes (one-click copy, or load straight into the editor), right in the console or one click from a long-running query in the Query Monitor.
Schema Explorer & object management
Browse the full object hierarchy of any database — tables, views, collections, indexes, procedures, functions, and sequences — across every engine, script any object back to its exact CREATE DDL, and make guarded, audited schema changes: drop or rename objects (type-to-confirm, never cascading), add / rename / drop columns, and create indexes.
Storage Insights & growth forecast
Per-object capacity breakdown — the largest tables and their indexes with total database size — plus continuous growth sampling that charts size over time and projects which table will fill your disk, and roughly when — and database size and growth-rate are alertable metrics, so you can page before a disk fills.
Configuration audit & fleet CIS posture
Assess each server against security, reliability, performance & observability best practices — TLS, durability (fsync), autovacuum, timeouts, weak password hashing, logging — with the current value, the recommended value, and why it matters. Findings map to CIS Benchmark domains, and a fleet-wide view aggregates open gaps per domain across every database and ranks connections by most findings first — the whole estate's compliance posture at a glance.
Database access control
Create, grant, and revoke database users and roles across engines — no hand-written, injection-prone SQL.
Backup & restore engine
Scheduled logical backups with retention, checksums, a watchdog, and one-click point-in-time restore into any target.
Immutable audit log
Every privileged action is recorded to an append-only log you can filter and export — enforced at the database level.
Compliance reporting
Map your audit trail to SOC 2 and ISO 27001 controls and export evidence as JSON, CSV, or PDF in a click.
Workspaces
Isolate dev, staging, and production under one organization — each with scoped connections, policies, and members.
Data-driven RBAC
Seven built-in roles plus custom roles and a live permission matrix enforce least privilege at the API, not just the UI.
Secrets & key management
AES-256-GCM at rest with a KeyProvider abstraction for HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault.
On-prem agent
A hardened, mTLS, auto-updating agent brokers the full toolset — health, sessions, logs, the complete assessment suite (wait events, storage, config audit, blocking, maintenance, EXPLAIN, composite health score), and schema DDL + object operations — to databases that never leave your network.
The features that set the standard
Approval gates, just-in-time access, anomaly detection, PII masking, and SIEM streaming — the controls regulated teams expect, built in.
Approval workflows
Production restores and destructive changes require a second approver — separation of duties, enforced and fully audited.
Index Advisor
Turns captured slow queries into concrete index recommendations with ready-to-review DDL. Insight, never auto-applied.
Maintenance Advisor
Reads each engine's own statistics catalogs to surface bloat needing VACUUM, unused indexes, stale stats, and fragmentation — each with a ready-to-review SQL action, never auto-applied.
PII discovery & masking
Finds sensitive columns and masks them in query results for anyone without explicit unmasked access.
Anomaly detection
Smart alerts that fire on statistical deviation from a rolling baseline — no fixed thresholds to babysit.
Just-in-time access
Grant time-boxed role elevation that expires automatically. Least privilege without the friction of standing access.
Schema drift detection
Compare two databases — staging vs production — and see exactly what was added, removed, or changed.
Saved query library
Share and reuse vetted SQL snippets across the team, scoped to each workspace.
SIEM streaming
Stream the immutable audit trail to Splunk, Datadog, or any webhook in real time — plus a public status page.
Know your fleet before your users do
Live health, capacity forecasting, replication lag, slow queries and active sessions across every engine — with 5-minute rollups so dashboards stay fast at thousands of databases.
- Per-engine status and environment tags
- Threshold alert rules with cooldowns
- Slow-query & session managers with safe, audited kill
- Six notification channels out of the box
Backups you can prove, restores you can watch
Policy-driven scheduled backups with retention, checksums and a heartbeat watchdog that reaps stuck jobs — plus an async restore workflow you can monitor live, into any target database.
- 15+ storage targets: S3, Azure, GCS, SFTP, OAuth, NFS
- Logical export/import across ten engines
- Failure alerting with org-default fallback
- Automatic history pruning past retention
Least privilege, enforced and proven
Data-driven RBAC enforced at the API, workspace-scoped membership down to by-id access, encrypted secrets, and an append-only audit trail that maps to your compliance frameworks.
- Seven built-in roles + custom roles, two tiers
- Workspace confinement for every resource
- AES-256-GCM at rest, secrets never logged
- SOC 2 / ISO 27001 evidence export
See it on your own databases
Connect a database and watch the fleet light up in minutes.
SOC 2 & ISO 27001 aligned · Self-hosting available · AES-256-GCM at rest