sql-firewall

Application-level field encryption for PostgreSQL. AES-256-GCM, searchable encryption, blind indexes, key rotation, cloud KMS, FIPS-140, crypto-shredding, SQL firewall. Written in Rust.

Official Vericto SDK for Python: check SQL before it runs (Snowflake, SQLite, SQLAlchemy, LangChain, LlamaIndex, dbt, Airflow)

Official Vericto SDK for Node.js: check SQL before it runs (Snowflake, better-sqlite3, LangChain.js)

Transparent PostgreSQL/MySQL wire-protocol proxy behind Vericto: blocks destructive queries before they reach the database. Source-available (ELv2).

Deterministic SQL AST evaluation engine behind Vericto: blocks destructive queries before they run. Source-available (ELv2).

SQL firewall for AI agents: read-only execution, table/column allowlists, PII masking and tamper-evident audit for PostgreSQL, MySQL and SQLite. Pre-alpha.

The SQL firewall for AI agents: a default-deny sidecar / MCP enforcement point that governs what an AI agent runs against your database. Open core, AGPL-3.0.

Homebrew tap for the Vericto CLI: brew install vericto/tap/vericto

Encrypt PostgreSQL fields at the application layer in Rust to protect data from DB access, leaked creds, and exposed backups