PostgreSQL Extension Catalogue

Name	Version	Description	Category	License	Language	PG Version	Stars
pgaudit	18.0	provides auditing functionality	SEC	PostgreSQL	C	14–18	1.7k
cedarling_pg	0.1.0	PostgreSQL integration for Cedarling authorization decisions, including JWT-aware checks and RLS-oriented helpers.	SEC	Apache-2.0	Rust	—	646
anon	3.2.2	PostgreSQL Anonymizer (anon) extension	SEC	PostgreSQL	Rust	14–19	295
pg_jobmon	1.4.1	Extension for logging and monitoring functions in PostgreSQL	SEC	PostgreSQL	SQL	14–18	203
sql_firewall	0.8	Cluster-wide query allowlist firewall with learning, enforcing, permissive, and disabled modes keyed by user and parse-tree fingerprint.	SEC	PostgreSQL	C	—	176
launchql-base32	0.0.3	RFC6238 TOTP implementation in pure PostgreSQL plpgsql	SEC	MIT	C	—	118
pgextwlist	1.20	PostgreSQL Extension Whitelisting	SEC	PostgreSQL	C	14–18	102
credcheck	5.0	credcheck - postgresql plain text credential checker	SEC	MIT	C	14–18	86
pg_enquo	0.0	PostgreSQL extension for encrypted query operations	SEC	MIT	Rust	12–17	79
set_user	4.2.0	similar to SET ROLE but with added logging	SEC	PostgreSQL	C	14–18	78
keyhippo	1.2.5	RLS-compatible API keys for PostgreSQL	SEC	MIT	SQL	15	59
libx509pq	1.3	X.509 certificate parsing library for PostgreSQL	SEC	GPL-3.0	C	12–18	54
pg-audit-json	1.0.2	Trigger-based PostgreSQL table auditing with JSONB row snapshots and recursive change diffs.	SEC	PostgreSQL	SQL	10–18	47
pg_roast	1.0	Opinionated PostgreSQL database auditor	SEC	PostgreSQL	C	14–18	40
pg_oidc_validator	1.1.0	OAuth and OIDC token validator for PostgreSQL 18	SEC	Apache-2.0	C++	18	35
pg_themis	1.0	PostgreSQL encryption and decryption functions backed by the Themis cryptographic library.	SEC	Apache-2.0	C	—	33
eql	2.2.1	Encrypt Query Language provides PostgreSQL types, functions, operators, and index support for searchable encrypted data.	SEC	MIT	SQL	14–17	29
check_access	0.1	Functions and views to facilitate PostgreSQL object access inspection	SEC	PostgreSQL	SQL	10–18	28
pg_snakeoil	1.4	The PostgreSQL Antivirus	SEC	PostgreSQL	C	14–18	25
pgauditlogtofile	1.8.5	pgAudit addon to redirect audit log to an independent file	SEC	PostgreSQL	C	14–18	24
aiven_extras	1.1.20	Aiven PostgreSQL extras for non-superuser access to selected database features.	SEC	Apache-2.0	C	12–18	22
column_encrypt	4.0	Transparent column-level encryption with encrypted_text and encrypted_bytea types	SEC	PostgreSQL	C	14–18	21
pg_diffix	fir	Provides strong dynamic anonymization for PostgreSQL query results.	SEC	MIT	C	13–18	19
pg_fhe	0.1	Microsoft SEAL-backed CKKS operations over encrypted values stored in PostgreSQL.	SEC	—	C++	—	18
pgzan	0.0.0	Proof-of-concept pgrx extension for evaluating Zanzibar-style authorization inside PostgreSQL row-level security policies.	SEC	—	Rust	11–15	18
pgsmcrypto	0.1.1	PostgreSQL SM Algorithm Extension	SEC	MIT	Rust	14–18	16
open_pg_tde	2.4.0	Transparent data encryption for upstream PostgreSQL using the tde_heap access method, including tables, indexes, TOAST, WAL, and temporary files.	SEC	PostgreSQL	C	16–18	14
webauthn	1.6	Pure-SQL PostgreSQL implementation of WebAuthn credential registration and assertion verification.	SEC	MIT	SQL	—	14
sslutils	1.4	A Postgres extension for managing SSL certificates through SQL	SEC	PostgreSQL	C	14–18	13
pg_enigma	0.5.0	Encrypted postgres data type	SEC	MIT	Rust	14–18	11
pg_audit	0.1.3	An extension for creating audit tables	SEC	BSD-2-Clause	SQL	10–18	10
pg_cel	0.1.0	A pure PostgreSQL implementation of the Google Zanzibar / OpenFGA authorization model.	SEC	Apache-2.0	Rust	—	10
pgjwt_rs	0.1.2	JWT verification for RS256 and Ed25519 tokens inside PostgreSQL	SEC	MIT	Rust	13–18	8
drop_role_helper	1.0	Generates SQL to revoke all privileges held by a role in the current database.	SEC	PostgreSQL	SQL	—	7
pg_pii_vault	0.0.0	PostgreSQL extension for GDPR-compliant column-level encryption using HashiCorp Vault Transit Engine.	SEC	MIT	Rust	13–18	6
pg_vault_tde	1.7.1	Transparent Data Encryption for PostgreSQL through custom table and index access methods	SEC	PostgreSQL	C	17–18	6
pgseccomp	1.0	provide seccomp syscall filtering for PostgreSQL	SEC	PostgreSQL	C	—	6
roleman	0.3.0	Parameterized role and privilege management functions for PostgreSQL.	SEC	PostgreSQL	SQL	10–18	6
accumulo_access_pg	0.1.5	PostgreSQL extension for parsing and evaluating Accumulo Access Expressions.	SEC	MIT	Rust	15	5
blake2b	1.0	PostgreSQL extension for fast secure hashing	SEC	MIT	C	—	5
oidc_validator	0.1.0	PostgreSQL 18 OIDC bearer-token validator plugin written in Rust	SEC	—	Rust	18	5
uniphant	1.5	PostgreSQL-centric authentication and authorization demo integrating WebAuthn, PostgREST, and role-based access control.	SEC	MIT	SQL	13	5
ac	0.0.1	Access Control Postgres extension (with dev environment)	SEC	—	SQL	—	4
otp	1.0.0	Implementation of TOTP compatible with Google Authenticator	SEC	PostgreSQL	SQL	10–18	4
passwordcheck_cracklib	3.1.0	Strengthen PostgreSQL user password checks with cracklib	SEC	LGPL-2.1	C	14–18	4
pg_ed25519	0.2	Ed25519 signing and signature-verification functions for PostgreSQL	SEC	MIT	C	10–18	4
pg_role_fkey_trigger_functions	1.0.4	A bunch of trigger functions to help establish and/or maintain referential integrity for columns that reference PostgreSQL ROLE NAMEs.	SEC	PostgreSQL	SQL	—	4
pg_sulog	1.0	PostgreSQL superuser operation logging and blocking extension	SEC	PostgreSQL	C	—	4
tce	0.10.0-dev	Transparent column encryption for PostgreSQL using per-role envelope keys and external key-management services.	SEC	PostgreSQL	Rust	15–18	4
tcle	1.0	Experimental table access method for transparent AES-256-CBC encryption of selected column types.	SEC	PostgreSQL	C	12–13	4

pgaudit

18.0

provides auditing functionality

14–18

0.1.0

PostgreSQL integration for Cedarling authorization decisions, including JWT-aware checks and RLS-oriented helpers.

—

3.2.2

PostgreSQL Anonymizer (anon) extension

14–19

1.4.1

Extension for logging and monitoring functions in PostgreSQL

14–18

0.8

Cluster-wide query allowlist firewall with learning, enforcing, permissive, and disabled modes keyed by user and parse-tree fingerprint.

—

0.0.3

RFC6238 TOTP implementation in pure PostgreSQL plpgsql

—

1.20

PostgreSQL Extension Whitelisting

14–18

5.0

credcheck - postgresql plain text credential checker

14–18

0.0

PostgreSQL extension for encrypted query operations

12–17

4.2.0

similar to SET ROLE but with added logging

14–18

1.2.5

RLS-compatible API keys for PostgreSQL

15

1.3

X.509 certificate parsing library for PostgreSQL

SEC

12–18

1.0.2

Trigger-based PostgreSQL table auditing with JSONB row snapshots and recursive change diffs.

10–18

1.0

Opinionated PostgreSQL database auditor

14–18

1.1.0

OAuth and OIDC token validator for PostgreSQL 18

18

1.0

PostgreSQL encryption and decryption functions backed by the Themis cryptographic library.

—

2.2.1

Encrypt Query Language provides PostgreSQL types, functions, operators, and index support for searchable encrypted data.

14–17

0.1

Functions and views to facilitate PostgreSQL object access inspection

10–18

1.4

The PostgreSQL Antivirus

14–18

1.8.5

pgAudit addon to redirect audit log to an independent file

14–18

1.1.20

Aiven PostgreSQL extras for non-superuser access to selected database features.

12–18

4.0

Transparent column-level encryption with encrypted_text and encrypted_bytea types

14–18

fir

Provides strong dynamic anonymization for PostgreSQL query results.

13–18

0.1

Microsoft SEAL-backed CKKS operations over encrypted values stored in PostgreSQL.

—

—

0.0.0

Proof-of-concept pgrx extension for evaluating Zanzibar-style authorization inside PostgreSQL row-level security policies.

—

11–15

0.1.1

PostgreSQL SM Algorithm Extension

14–18

2.4.0

Transparent data encryption for upstream PostgreSQL using the tde_heap access method, including tables, indexes, TOAST, WAL, and temporary files.

16–18

1.6

Pure-SQL PostgreSQL implementation of WebAuthn credential registration and assertion verification.

—

1.4

A Postgres extension for managing SSL certificates through SQL

14–18

0.5.0

Encrypted postgres data type

14–18

0.1.3

An extension for creating audit tables

10–18

0.1.0

A pure PostgreSQL implementation of the Google Zanzibar / OpenFGA authorization model.

—

0.1.2

JWT verification for RS256 and Ed25519 tokens inside PostgreSQL

13–18

1.0

Generates SQL to revoke all privileges held by a role in the current database.

—

0.0.0

PostgreSQL extension for GDPR-compliant column-level encryption using HashiCorp Vault Transit Engine.

13–18

1.7.1

Transparent Data Encryption for PostgreSQL through custom table and index access methods

17–18

1.0

provide seccomp syscall filtering for PostgreSQL

—

0.3.0

Parameterized role and privilege management functions for PostgreSQL.

10–18

0.1.5

PostgreSQL extension for parsing and evaluating Accumulo Access Expressions.

15

1.0

PostgreSQL extension for fast secure hashing

—

0.1.0

PostgreSQL 18 OIDC bearer-token validator plugin written in Rust

—

18

1.5

PostgreSQL-centric authentication and authorization demo integrating WebAuthn, PostgREST, and role-based access control.

13

0.0.1

Access Control Postgres extension (with dev environment)

—

—

1.0.0

Implementation of TOTP compatible with Google Authenticator

10–18

passwordcheck_cracklib

3.1.0

Strengthen PostgreSQL user password checks with cracklib

14–18

0.2

Ed25519 signing and signature-verification functions for PostgreSQL

10–18

pg_role_fkey_trigger_functions

1.0.4

A bunch of trigger functions to help establish and/or maintain referential integrity for columns that reference PostgreSQL ROLE NAMEs.

—

1.0

PostgreSQL superuser operation logging and blocking extension

—

0.10.0-dev

Transparent column encryption for PostgreSQL using per-role envelope keys and external key-management services.

15–18

1.0

Experimental table access method for transparent AES-256-CBC encryption of selected column types.

12–13

Quick links

PostgreSQL Extension Catalogue