select open change scope Open full search

PG.CENTER connects PostgreSQL documentation, reference, and ecosystem knowledge. Maintained by Pigsty.

PostgreSQL Extension Catalogue

Explore 2387 PostgreSQL extensions from PGEXT, maintained by Pigsty.

pgaudit · provides auditing functionality · 18.0 · Security · PostgreSQL · C · Packagedpgsodium · Postgres extension for libsodium functions · 3.1.11 · Security · BSD-3-Clause · C · Packagedsupabase_vault · Supabase Vault Extension · 0.3.1 · Security · Apache-2.0 · C · Packagedpg_tde · Percona pg_tde access method · 2.2.1 · Security · MIT · C · Packagedsql_firewall · Cluster-wide query allowlist firewall with learning, enforcing, permissive, and disabled modes keyed by user and parse-tree fingerprint. · 0.8 · Security · PostgreSQL · C · Not packagedlaunchql-base32 · RFC6238 TOTP implementation in pure PostgreSQL plpgsql · 0.0.3 · Security · MIT · C · Not packagedpgextwlist · PostgreSQL Extension Whitelisting · 1.20 · Security · PostgreSQL · C · Packagedsupautils · Extension that secures a cluster on a cloud environment · 3.2.1 · Security · Apache-2.0 · C · Packagedcredcheck · credcheck - postgresql plain text credential checker · 5.0 · Security · MIT · C · Packagedset_user · similar to SET ROLE but with added logging · 4.2.0 · Security · PostgreSQL · C · Packagedpg_credereum · Cryptographically verifiable database auditing backed by blockchain-style transaction blocks. · 0.1 · Security · GPL-3.0 · C · Not packagedlibx509pq · X.509 certificate parsing library for PostgreSQL · 1.3 · Security · GPL-3.0 · C · Not packagedpg_roast · Opinionated PostgreSQL database auditor · 1.0 · Security · PostgreSQL · C · Packagedlogerrors · Function for collecting statistics about messages in logfile · 2.1.5 · Security · BSD-3-Clause · C · Packagedlogin_hook · login_hook - hook to execute login_hook.login() at login time · 1.7 · Security · GPL-3.0 · C · Packagedpg_themis · PostgreSQL encryption and decryption functions backed by the Themis cryptographic library. · 1.0 · Security · Apache-2.0 · C · Not packagedpg_auth_mon · monitor connection attempts per user · 3.0 · Security · MIT · C · Packagedpg_snakeoil · The PostgreSQL Antivirus · 1.4 · Security · PostgreSQL · C · Packagedpgauditlogtofile · pgAudit addon to redirect audit log to an independent file · 1.8.5 · Security · PostgreSQL · C · Packagedhello-world · RLS demo extension with users and products tables · 0.0.1 · Security · MIT · C · Not packagedsupabase · A friendly playground for building and validating Supabase Row‑Level Security (RLS) · 0.0.1 · Security · MIT · C · Not packagedaiven_extras · Aiven PostgreSQL extras for non-superuser access to selected database features. · 1.1.20 · Security · Apache-2.0 · C · Not packagedcolumn_encrypt · Transparent column-level encryption with encrypted_text and encrypted_bytea types · 4.0 · Security · PostgreSQL · C · Packagedpg_diffix · Provides strong dynamic anonymization for PostgreSQL query results. · fir · Security · MIT · C · Not packagedpgspeck · Encrypt and decrypt 32-bit and 48-bit integer blocks with the Speck symmetric cipher · 1.0 · Security · MIT · C · Not packagedopen_pg_tde · Transparent data encryption for upstream PostgreSQL using the tde_heap access method, including tables, indexes, TOAST, WAL, and temporary files. · 2.4.0 · Security · PostgreSQL · C · Not packagedpgpm-jwt-claims · Agentic DB - Give your agent a brain · 0.15.5 · Security · MIT · C · Not packagedsslutils · A Postgres extension for managing SSL certificates through SQL · 1.4 · Security · PostgreSQL · C · Packagednoddl · Cluster-wide DDL blocker with role and database exceptions. · 1.0 · Security · MIT · C · Not packagednoset · Module for blocking SET variables for non-super users. · 0.3.0 · Security · AGPL-3.0 · C · Packagedpg_vault_tde · Transparent Data Encryption for PostgreSQL through custom table and index access methods · 1.7.1 · Security · PostgreSQL · C · Packagedpgseccomp · provide seccomp syscall filtering for PostgreSQL · 1.0 · Security · PostgreSQL · C · Not packagedblake2b · PostgreSQL extension for fast secure hashing · 1.0 · Security · MIT · C · Not packagedpg_kpart · Reject full partition scans that omit the partition key · 1.0 · Security · ISC · C · Packagedpasswordcheck_cracklib · Strengthen PostgreSQL user password checks with cracklib · 3.1.0 · Security · LGPL-2.1 · C · Packagedpg_ed25519 · Ed25519 signing and signature-verification functions for PostgreSQL · 0.2 · Security · MIT · C · Not packagedpg_sulog · PostgreSQL superuser operation logging and blocking extension · 1.0 · Security · PostgreSQL · C · Not packagedtcle · Experimental table access method for transparent AES-256-CBC encryption of selected column types. · 1.0 · Security · PostgreSQL · C · Not packageded25519 · PostgreSQL extension for a modern and secure digital signature algorithm based on performance-optimized elliptic curves · 1.0 · Security · MIT · C · Not packagedlogin_refuse · Authentication hook that temporarily refuses logins after repeated failures · 0.1 · Security · Unknown · C · Not packagedpasswordpolicy · Dynamically configurable PostgreSQL password complexity checks. · 2.0.5 · Security · PostgreSQL · C · Packagedpg_pwhash · Advanced password hashing methods for PostgreSQL · 1.0 · Security · MIT · C · Packagedpg_ssl · Create base64-encoded PKCS#7 signatures from PEM certificates and private keys in PostgreSQL · 1.0 · Security · MIT · C · Not packagedpgpm-defaults · PostgreSQL modules using the pgpm workflow for safe, testable, reversible SQL changes. · 0.15.5 · Security · MIT · C · Not packagedpgsqlauditengine · SQL policy checks with an embedded rule and audit REST API · 1.0 · Security · GPL-3.0-only · C · Not packagedtable_guard · Configurable protection against DROP, TRUNCATE, and unqualified whole-table DELETE. · 1.0 · Security · Unknown · C · Not packagedcheck_chapmd5_password · Function for verifying CHAP-MD5 authentication responses. · 0.0.1 · Security · Apache-2.0 · C · Not packageddatafly_anon · Datafly anonymizer · 1.25 · Security · PostgreSQL · C · Not packagededb_block_commands · Restricts EDB Advanced Server superusers from utility, DML, and SELECT commands using whitelist GUCs. · 1.0 · Security · Unknown · C · Not packagedopenssl · PostgreSQL extension for cryptographic functions and types provided by OpenSSL · 0.0.1 · Security · PostgreSQL · C · Not packagedpg_dctp · Preload-only module that blocks clear-text passwords in role DDL · 0.0.1 · Security · PostgreSQL · C · Not packagedpg_injection · PostgreSQL injection · 1.0.0 · Security · MIT · C · Not packagedpg_neon_sudo · Provides Neon-specific trusted sudo wrappers that run PostgreSQL Anonymizer dynamic-masking start and stop operations as the bootstrap superuser. · 0.0.1 · Security · Unknown · C · Not packagedpg_set_acl · SET command access control list · 0.0.1 · Security · PostgreSQL · C · Not packagedpgintegrity · Trigger-based row integrity watermark checker for PostgreSQL tables · 0.0.1 · Security · Unknown · C · Not packagedpgsword · enforce Qunar SQL auditing and database object rules · 1.0 · Security · Unknown · C · Not packagedsm2 · SM2 elliptic curve cryptography functions (Chinese National Standard GB/T 32918) · 1.0 · Security · Unknown · C · Not packagedsm4 · SM4 encryption/decryption functions (Chinese National Standard) · 1.0 · Security · Unknown · C · Not packagedaclexplode · A backport of aclexplode function for PostgreSQL 8.4 and below · 1.0.3 · Security · PostgreSQL · C · Not packagedauth_delay · pause briefly before reporting authentication failure · - · Security · PostgreSQL · C · Packagedencdb · Alibaba Cloud RDS extension that provides Always Confidential Database features for PostgreSQL. · 1.1.14 · Security · Unknown · C · Not packagedencdb_btree · Alibaba Cloud RDS extension that accelerates ciphertext index queries for Always Confidential Databases. · 1.0.0 · Security · Unknown · C · Not packagedext3 · ClientAuthentication hook example that logs authentication start and end events. · 1.0 · Security · Unknown · C · Not packagedlaunchql-totp · 🛠. basic pg utils · 0.4.5 · Security · MIT · C · Not packagedletter · letter: role-based access control for PostgreSQL · 0.1 · Security · MIT · C · Not packagedlog_entries · Row trigger that records who changed a row and when · 1.0 · Security · Unknown · C · Not packagedopentde · Open Transparent Data Encryption for PostgreSQL. · 1.0 · Security · Unknown · C · Not packagedorgpasscheck · Password policy enforcement extension for PostgreSQL 16+ · 5.0 · Security · Unknown · C · Not packagedpasswordcheck · checks user passwords and reject weak password · - · Security · PostgreSQL · C · Packagedpg_ad_mapping · Maps Active Directory security groups to database roles on Aurora PostgreSQL. · 1.0 · Security · Unknown · C · Not packagedpg_argon2id · PostgreSQL extension for Argon2id password hashing functions · 1.0 · Security · MIT · C · Not packagedpg_block_systemcatalog · PostgreSQL extension to block references to system catalogs. · 1.0 · Security · PostgreSQL · C · Not packagedpg_columnmask · Amazon Aurora PostgreSQL extension for role-based dynamic column masking without changing stored data. · 1.1.0 · Security · Unknown · C · Not packagedpg_login_guard · Fail2ban-style role lockout after repeated authentication failures. · 1.0 · Security · MIT · C · Not packagedpg_mask · A tiny data mask utility written in C · 1.0.0 · Security · MIT · C · Not packagedpg_secret · Defines order-revealing encrypted domains, comparison operators, and a B-tree operator class. · 0.5 · Security · Unknown · C · Not packagedpgaudix · A native PostgreSQL extension for automatic table auditing. It mirrors table columns into audit tables and automatically keeps them in sync when the source table structure changes. · 0.2.0 · Security · Unknown · C · Not packagedpgcrypsi · C Crypsi (https://github.com/telkomdev/c-crypsi) PostgreSQL Extension · 0.0.1 · Security · MIT · C · Not packagedpgcrypto · cryptographic functions · 1.3 · Security · PostgreSQL · C · Packagedpgcryptokey · cryptographic key management · 0.85 · Security · PostgreSQL · C · Packagedpgedge_safesession · Enforce read-only sessions for specified PostgreSQL roles. · 1.0-alpha1 · Security · PostgreSQL · C · Not packagedpostfga · A preload PostgreSQL extension integrating OpenFGA authorization through an FDW, C functions, gRPC background work and shared-memory caching. · 1.0.0 · Security · Unknown · C · Not packagedrds_activity_stream · Amazon Aurora PostgreSQL database activity streams · 1.7 · Security · Unknown · C · Not packagedrds_encdb · Alibaba Cloud RDS sensitive-column result encryption extension · 1.0 · Security · Unknown · C · Not packagedsepgsql · label-based mandatory access control (MAC) based on SELinux security policy. · - · Security · PostgreSQL · C · Packagedskitch-extension-defaults · default roles · 0.0.7 · Security · MIT · C · Not packagedtencentdb_pwdcheck · TencentDB password-policy extension loaded at server startup to enforce strong passwords. · 1.0 · Security · Unknown · C · Not packagedtencentdb_superuser · TencentDB administration extension that supplies the managed pg_tencentdb_superuser role and privileges. · 1.1 · Security · Unknown · C · Not packaged

88 extensions found. Clear filters

NameVersionDescriptionCategoryLicenseLanguagePG VersionStars
pg_dctp 0.0.1 Preload-only module that blocks clear-text passwords in role DDL SEC PostgreSQL C 14–18 1
pg_injection 1.0.0 PostgreSQL injection SEC MIT C 1
pg_neon_sudo 0.0.1 Provides Neon-specific trusted sudo wrappers that run PostgreSQL Anonymizer dynamic-masking start and stop operations as the bootstrap superuser. SEC C 16–18 1
pg_set_acl 0.0.1 SET command access control list SEC PostgreSQL C 1
pgintegrity 0.0.1 Trigger-based row integrity watermark checker for PostgreSQL tables SEC C 1
pgsword 1.0 enforce Qunar SQL auditing and database object rules SEC C 10 1
sm2 1.0 SM2 elliptic curve cryptography functions (Chinese National Standard GB/T 32918) SEC C 1
sm4 1.0 SM4 encryption/decryption functions (Chinese National Standard) SEC C 1
aclexplode 1.0.3 A backport of aclexplode function for PostgreSQL 8.4 and below SEC PostgreSQL C
auth_delay - pause briefly before reporting authentication failure SEC PostgreSQL C 14–18
encdb 1.1.14 Alibaba Cloud RDS extension that provides Always Confidential Database features for PostgreSQL. SEC C 10–17
encdb_btree 1.0.0 Alibaba Cloud RDS extension that accelerates ciphertext index queries for Always Confidential Databases. SEC C 10–17
ext3 1.0 ClientAuthentication hook example that logs authentication start and end events. SEC C
launchql-totp 0.4.5 🛠. basic pg utils SEC MIT C
letter 0.1 letter: role-based access control for PostgreSQL SEC MIT C
log_entries 1.0 Row trigger that records who changed a row and when SEC C
opentde 1.0 Open Transparent Data Encryption for PostgreSQL. SEC C
orgpasscheck 5.0 Password policy enforcement extension for PostgreSQL 16+ SEC C
passwordcheck - checks user passwords and reject weak password SEC PostgreSQL C 14–18
pg_ad_mapping 1.0 Maps Active Directory security groups to database roles on Aurora PostgreSQL. SEC C 14–18
pg_argon2id 1.0 PostgreSQL extension for Argon2id password hashing functions SEC MIT C
pg_block_systemcatalog 1.0 PostgreSQL extension to block references to system catalogs. SEC PostgreSQL C 10
pg_columnmask 1.1.0 Amazon Aurora PostgreSQL extension for role-based dynamic column masking without changing stored data. SEC C 16–18
pg_login_guard 1.0 Fail2ban-style role lockout after repeated authentication failures. SEC MIT C 16–18
pg_mask 1.0.0 A tiny data mask utility written in C SEC MIT C
pg_secret 0.5 Defines order-revealing encrypted domains, comparison operators, and a B-tree operator class. SEC C
pgaudix 0.2.0 A native PostgreSQL extension for automatic table auditing. It mirrors table columns into audit tables and automatically keeps them in sync when the source table structure changes. SEC C
pgcrypsi 0.0.1 C Crypsi (https://github.com/telkomdev/c-crypsi) PostgreSQL Extension SEC MIT C
pgcrypto 1.3 cryptographic functions SEC PostgreSQL C 14–18
pgcryptokey 0.85 cryptographic key management SEC PostgreSQL C 14–18
pgedge_safesession 1.0-alpha1 Enforce read-only sessions for specified PostgreSQL roles. SEC PostgreSQL C 14–18
postfga 1.0.0 A preload PostgreSQL extension integrating OpenFGA authorization through an FDW, C functions, gRPC background work and shared-memory caching. SEC C 18
rds_activity_stream 1.7 Amazon Aurora PostgreSQL database activity streams SEC C 11–16
rds_encdb 1.0 Alibaba Cloud RDS sensitive-column result encryption extension SEC C 16
sepgsql - label-based mandatory access control (MAC) based on SELinux security policy. SEC PostgreSQL C 14–18
skitch-extension-defaults 0.0.7 default roles SEC MIT C
tencentdb_pwdcheck 1.0 TencentDB password-policy extension loaded at server startup to enforce strong passwords. SEC C 10–17
tencentdb_superuser 1.1 TencentDB administration extension that supplies the managed pg_tencentdb_superuser role and privileges. SEC C 10–18