Your database
Security & compliance
Releases
Stability
Database security posture
Row-level access and encryption on a directly-connected database.
Overview
For databases you connect directly rather than through a platform, lumioguard reads catalog metadata only — never table contents — to check row-level access control, encryption at rest, and engine currency.
What it looks for
- Row-Level Security off, or enabled with no policies (Postgres)
- Encryption at rest disabled (SQL Server TDE)
- Database engines running out-of-date or end-of-life versions
Why it matters
Row-Level Security off in Postgres means access control exists only in application code, so any query path that forgets a WHERE returns everything. An engine past end-of-life stops receiving security patches while continuing to run perfectly well.
Rules in this check
| What it reports | Fix path |
|---|---|
| Row-Level Security off / no policies (Postgres) | Guide |
| Encryption at rest off (SQL Server TDE) | Guide |
| Out-of-date engine major version | Guide |
How the fixes arrive
GuideChanges only you can make safely arrive as a step-by-step guide you can follow yourself or hand to your coding agent.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.