VaultSQL

About VaultSQL

VaultSQL is an open-source, zero-trust SQL workbench built to end the practice of passing production database passwords around a team in a password manager or a Slack thread. It runs in the browser as a full workbench — browse data, filter results, update rows inline, preview foreign-key relationships and export — but the credential handling is the actual product. In Vault Mode, connection credentials are encrypted on the user's own device before they ever reach VaultSQL's servers, and the service never holds the decryption keys, so the hosted version cannot read the databases it connects you to. On top of that sit two workflow features that matter more in practice than the encryption does: access requests, which grant temporary, expiring database access to an on-call engineer or a contractor and revoke it in one click without anyone learning a password; and audit logs that record queries, connections and access changes, filterable by user, database or time range and exportable for a compliance review. The deployment story is the unusual part commercially. The core is open source and there are two options, both free: a managed hosted workspace run by the VaultSQL team with automatic updates, or a self-hosted deployment in your own cloud or on-prem environment for teams with infrastructure requirements that rule out a third-party service. No paid tier is currently published for either path.

Key Features

VaultSQL Pros & Cons

Tags