SEC - Security

Auditing Logs, Enforce Passwords, Keep Secrets, TDE, SM Algorithm, Login Hooks, Log Errors, Extension White List, …

Extension List

There are 28 extensions in 28 packages.

ExtensionPackageVersionLicenseLanguageDescription
passwordcheck_cracklibpasswordcheck_cracklib3.1.0LGPL-2.1CStrengthen PostgreSQL user password checks with cracklib
supautilssupautils3.1.0Apache-2.0CExtension that secures a cluster on a cloud environment
pgsodiumpgsodium3.1.9BSD 3-ClauseCPostgres extension for libsodium functions
supabase_vaultpg_vault0.3.1Apache-2.0CSupabase Vault Extension
pg_session_jwtpg_session_jwt0.4.0Apache-2.0RustManage authentication sessions using JWTs
anonpg_anon3.0.1PostgreSQLRustPostgreSQL Anonymizer (anon) extension
pgsmcryptopgsmcrypto0.1.1MITRustPostgreSQL SM Algorithm Extension
pg_enigmapg_enigma0.5.0MITRustEncrypted postgres data type
pgauditpgaudit18.0PostgreSQLCprovides auditing functionality
pgauditlogtofilepgauditlogtofile1.8.0PostgreSQLCpgAudit addon to redirect audit log to an independent file
pg_auditorpg_auditor0.2BSD 3-ClauseSQLAudit data changes and provide flashback ability
logerrorslogerrors2.1.5BSD 3-ClauseCFunction for collecting statistics about messages in logfile
pg_auth_monpg_auth_mon3.0MITCmonitor connection attempts per user
pg_jobmonpg_jobmon1.4.1PostgreSQLSQLExtension for logging and monitoring functions in PostgreSQL
credcheckcredcheck4.6MITCcredcheck - postgresql plain text credential checker
pgcryptokeypgcryptokey0.85PostgreSQLCcryptographic key management
pg_pwhashpg_pwhash1.0MITCAdvanced password hashing methods for PostgreSQL
login_hooklogin_hook1.7GPL-3.0Clogin_hook - hook to execute login_hook.login() at login time
set_userset_user4.2.0PostgreSQLCsimilar to SET ROLE but with added logging
pg_snakeoilpg_snakeoil1.4PostgreSQLCThe PostgreSQL Antivirus
pgextwlistpgextwlist1.19PostgreSQLCPostgreSQL Extension Whitelisting
sslutilssslutils1.4PostgreSQLCA Postgres extension for managing SSL certificates through SQL
nosetpg_noset0.3.0AGPL-3.0CModule for blocking SET variables for non-super users.
pg_tdepg_tde2.1MITCPercona pg_tde access method
sepgsqlsepgsql-PostgreSQLClabel-based mandatory access control (MAC) based on SELinux security policy.
auth_delayauth_delay-PostgreSQLCpause briefly before reporting authentication failure
pgcryptopgcrypto1.3PostgreSQLCcryptographic functions
passwordcheckpasswordcheck-PostgreSQLCchecks user passwords and reject weak password

passwordcheck_cracklib

passwordcheck_cracklib - 3.1.0 : Strengthen PostgreSQL user password checks with cracklib

ItemValueOSx86_64aarch64
Extensionpasswordcheck_cracklibel818171615141817161514
Packagepasswordcheck_cracklibel918171615141817161514
RPMpasswordcheck_cracklib_$vel1018171615141817161514
DEBpostgresql-$v-passwordcheck-cracklibd1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicenseLGPL-2.1u2418171615141817161514

supautils

supautils - 3.1.0 : Extension that secures a cluster on a cloud environment

ItemValueOSx86_64aarch64
Extensionsupautilsel818171615141817161514
Packagesupautilsel918171615141817161514
RPMsupautils_$vel1018171615141817161514
DEBpostgresql-$v-supautilsd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseApache-2.0u2418171615141817161514

pgsodium

pgsodium - 3.1.9 : Postgres extension for libsodium functions

ItemValueOSx86_64aarch64
Extensionpgsodiumel818171615141817161514
Packagepgsodiumel918171615141817161514
RPMpgsodium_$vel1018171615141817161514
DEBpostgresql-$v-pgsodiumd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseBSD 3-Clauseu2418171615141817161514

supabase_vault

pg_vault - 0.3.1 : Supabase Vault Extension

ItemValueOSx86_64aarch64
Extensionsupabase_vaultel818171615141817161514
Packagepg_vaultel918171615141817161514
RPMvault_$vel1018171615141817161514
DEBpostgresql-$v-vaultd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseApache-2.0u2418171615141817161514

pg_session_jwt

pg_session_jwt - 0.4.0 : Manage authentication sessions using JWTs

ItemValueOSx86_64aarch64
Extensionpg_session_jwtel818171615141817161514
Packagepg_session_jwtel918171615141817161514
RPMpg_session_jwt_$vel1018171615141817161514
DEBpostgresql-$v-pg-session-jwtd1218171615141817161514
LanguageRustd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseApache-2.0u2418171615141817161514

anon

pg_anon - 3.0.1 : PostgreSQL Anonymizer (anon) extension

ItemValueOSx86_64aarch64
Extensionanonel818171615141817161514
Packagepg_anonel918171615141817161514
RPMpg_anon_$vel1018171615141817161514
DEBpostgresql-$v-pg-anond1218171615141817161514
LanguageRustd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pgsmcrypto

pgsmcrypto - 0.1.1 : PostgreSQL SM Algorithm Extension

ItemValueOSx86_64aarch64
Extensionpgsmcryptoel818171615141817161514
Packagepgsmcryptoel918171615141817161514
RPMpgsmcrypto_$vel1018171615141817161514
DEBpostgresql-$v-pgsmcryptod1218171615141817161514
LanguageRustd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseMITu2418171615141817161514

pg_enigma

pg_enigma - 0.5.0 : Encrypted postgres data type

ItemValueOSx86_64aarch64
Extensionpg_enigmael818171615141817161514
Packagepg_enigmael918171615141817161514
RPMpg_enigma_$vel1018171615141817161514
DEBpostgresql-$v-enigmad1218171615141817161514
LanguageRustd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseMITu2418171615141817161514

pgaudit

pgaudit - 18.0 : provides auditing functionality

ItemValueOSx86_64aarch64
Extensionpgauditel818171615141817161514
Packagepgauditel918171615141817161514
RPMpgaudit_$vel1018171615141817161514
DEBpostgresql-$v-pgauditd1218171615141817161514
LanguageCd1318171615141817161514
RepoPGDGu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pgauditlogtofile

pgauditlogtofile - 1.8.0 : pgAudit addon to redirect audit log to an independent file

ItemValueOSx86_64aarch64
Extensionpgauditlogtofileel818171615141817161514
Packagepgauditlogtofileel918171615141817161514
RPMpgauditlogtofile_$vel1018171615141817161514
DEBpostgresql-$v-pgauditlogtofiled1218171615141817161514
LanguageCd1318171615141817161514
RepoPGDGu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pg_auditor

pg_auditor - 0.2 : Audit data changes and provide flashback ability

ItemValueOSx86_64aarch64
Extensionpg_auditorel818171615141817161514
Packagepg_auditorel918171615141817161514
RPMpg_auditor_$vel1018171615141817161514
DEBpostgresql-$v-pg-auditord1218171615141817161514
LanguageSQLd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseBSD 3-Clauseu2418171615141817161514

logerrors

logerrors - 2.1.5 : Function for collecting statistics about messages in logfile

ItemValueOSx86_64aarch64
Extensionlogerrorsel818171615141817161514
Packagelogerrorsel918171615141817161514
RPMlogerrors_$vel1018171615141817161514
DEBpostgresql-$v-logerrorsd1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicenseBSD 3-Clauseu2418171615141817161514

pg_auth_mon

pg_auth_mon - 3.0 : monitor connection attempts per user

ItemValueOSx86_64aarch64
Extensionpg_auth_monel818171615141817161514
Packagepg_auth_monel918171615141817161514
RPMpg_auth_mon_$vel1018171615141817161514
DEBpostgresql-$v-pg-auth-mond1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicenseMITu2418171615141817161514

pg_jobmon

pg_jobmon - 1.4.1 : Extension for logging and monitoring functions in PostgreSQL

ItemValueOSx86_64aarch64
Extensionpg_jobmonel818171615141817161514
Packagepg_jobmonel918171615141817161514
RPMpg_jobmon_$vel1018171615141817161514
DEBpostgresql-$v-pg-jobmond1218171615141817161514
LanguageSQLd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

credcheck

credcheck - 4.6 : credcheck - postgresql plain text credential checker

ItemValueOSx86_64aarch64
Extensioncredcheckel818171615141817161514
Packagecredcheckel918171615141817161514
RPMcredcheck_$vel1018171615141817161514
DEBpostgresql-$v-credcheckd1218171615141817161514
LanguageCd1318171615141817161514
RepoPGDGu2218171615141817161514
LicenseMITu2418171615141817161514

pgcryptokey

pgcryptokey - 0.85 : cryptographic key management

ItemValueOSx86_64aarch64
Extensionpgcryptokeyel818171615141817161514
Packagepgcryptokeyel918171615141817161514
RPMpgcryptokey_$vel1018171615141817161514
DEBpostgresql-$v-pgcryptokeyd1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pg_pwhash

pg_pwhash - 1.0 : Advanced password hashing methods for PostgreSQL

ItemValueOSx86_64aarch64
Extensionpg_pwhashel818171615141817161514
Packagepg_pwhashel918171615141817161514
RPMpg_pwhash_$vel1018171615141817161514
DEBpostgresql-$v-pg-pwhashd1218171615141817161514
LanguageCd1318171615141817161514
RepoPGDGu2218171615141817161514
LicenseMITu2418171615141817161514

login_hook

login_hook - 1.7 : login_hook - hook to execute login_hook.login() at login time

ItemValueOSx86_64aarch64
Extensionlogin_hookel818171615141817161514
Packagelogin_hookel918171615141817161514
RPMlogin_hook_$vel1018171615141817161514
DEBpostgresql-$v-login-hookd1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicenseGPL-3.0u2418171615141817161514

set_user

set_user - 4.2.0 : similar to SET ROLE but with added logging

ItemValueOSx86_64aarch64
Extensionset_userel818171615141817161514
Packageset_userel918171615141817161514
RPMset_user_$vel1018171615141817161514
DEBpostgresql-$v-set-userd1218171615141817161514
LanguageCd1318171615141817161514
RepoPGDGu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pg_snakeoil

pg_snakeoil - 1.4 : The PostgreSQL Antivirus

ItemValueOSx86_64aarch64
Extensionpg_snakeoilel818171615141817161514
Packagepg_snakeoilel918171615141817161514
RPMpg_snakeoil_$vel1018171615141817161514
DEBpostgresql-$v-snakeoild1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pgextwlist

pgextwlist - 1.19 : PostgreSQL Extension Whitelisting

ItemValueOSx86_64aarch64
Extensionpgextwlistel818171615141817161514
Packagepgextwlistel918171615141817161514
RPMpgextwlist_$vel1018171615141817161514
DEBpostgresql-$v-pgextwlistd1218171615141817161514
LanguageCd1318171615141817161514
RepoMIXEDu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

sslutils

sslutils - 1.4 : A Postgres extension for managing SSL certificates through SQL

ItemValueOSx86_64aarch64
Extensionsslutilsel818171615141817161514
Packagesslutilsel918171615141817161514
RPMsslutils_$vel1018171615141817161514
DEBpostgresql-$v-sslutilsd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

noset

pg_noset - 0.3.0 : Module for blocking SET variables for non-super users.

ItemValueOSx86_64aarch64
Extensionnosetel818171615141817161514
Packagepg_nosetel918171615141817161514
RPMnoset_$vel1018171615141817161514
DEBpostgresql-$v-nosetd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseAGPL-3.0u2418171615141817161514

pg_tde

pg_tde - 2.1 : Percona pg_tde access method

ItemValueOSx86_64aarch64
Extensionpg_tdeel818171615141817161514
Packagepg_tdeel918171615141817161514
RPMpercona-postgresql$vel1018171615141817161514
DEBpercona-postgresql-$vd1218171615141817161514
LanguageCd1318171615141817161514
RepoPIGSTYu2218171615141817161514
LicenseMITu2418171615141817161514

sepgsql

sepgsql - - : label-based mandatory access control (MAC) based on SELinux security policy.

ItemValueOSx86_64aarch64
Extensionsepgsqlel818171615141817161514
Packagesepgsqlel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
LanguageCd1318171615141817161514
RepoCONTRIBu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

auth_delay

auth_delay - - : pause briefly before reporting authentication failure

ItemValueOSx86_64aarch64
Extensionauth_delayel818171615141817161514
Packageauth_delayel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
LanguageCd1318171615141817161514
RepoCONTRIBu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

pgcrypto

pgcrypto - 1.3 : cryptographic functions

ItemValueOSx86_64aarch64
Extensionpgcryptoel818171615141817161514
Packagepgcryptoel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
LanguageCd1318171615141817161514
RepoCONTRIBu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

passwordcheck

passwordcheck - - : checks user passwords and reject weak password

ItemValueOSx86_64aarch64
Extensionpasswordcheckel818171615141817161514
Packagepasswordcheckel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
LanguageCd1318171615141817161514
RepoCONTRIBu2218171615141817161514
LicensePostgreSQLu2418171615141817161514

Last Modified 2026-03-12: add pg extension catalog (95749bf)