- Home
- Database Vulnerability Scanners
- SQLTriage
SQLTriage
What it is
SQLTriage audits SQL Server and maps findings to compliance controls, with cited evidence and a PDF intended for board review. It describes 576+ checks across security, performance, configuration, high availability, backup and recovery. Mappings include NIST 800-53, CIS Benchmarks, DISA STIG, ISO 27001, SOC 2, PCI-DSS and HIPAA. Its read-only assessment queries SQL Server DMVs without installing an agent or changing the schema; separate opt-in deployment and remediation pages can make changes. Companion monitoring views include live sessions, blocking chains, query plans, wait stats, dashboards and alerts. The app is local-only by default, with no telemetry, phone-home or cloud dependency, and optional Azure Blob export is available. The repository says SQL passwords are encrypted at rest with AES-256-GCM and DPAPI. Connections can use Windows authentication, SQL authentication or Azure AD. SQL Server is the supported database; Azure SQL Managed Instance is fully supported, while Azure SQL Database has partial support and automatically skips checks requiring server-level DMV access. SQLTriage is free under GNU GPL v3, permits commercial use and requires modifications to remain open. It is offered as a Windows desktop app and Windows Service, with service dashboards accessible in a browser via Kestrel HTTPS; hosted SaaS dashboards are not offered.
For and against
For
- Describes 576+ checks across key database areas
- Maps findings to named compliance frameworks
- Read-only assessment does not alter SQL Server schema
- Free commercial use under GNU GPL v3
- Includes monitoring views and alerting
Against
- SQL Server is the supported database
- Azure SQL Database has partial support
- Hosted SaaS dashboards are not offered
- Modifications must remain open under GPL v3
The verdict
SQLTriage combines SQL Server assessment, compliance mapping and monitoring in a free Windows-oriented package. Its database scope and open-source modification terms are important constraints to consider.
Who it suits
It is aimed at senior DBAs, database consultants, InfoSec and compliance teams, and CIOs working with SQL Server. It suits users comfortable with a Windows deployment and a GPL v3 license.
Plans and prices
Free
All features · no per-server fees · no subscription · no feature tiers
Read 5 Oct 2026 · sqladrian.github.io
On the record
- Azure SQL support
- Azure SQL Managed Instance is fully supported; Azure SQL Database has partial support, with checks requiring server-level DMV access skipped automatically.sqladrian.github.io · read 5 Oct 2026
- Checks
- The site describes 576+ checks covering security, performance, configuration, and high availability, backup, and recovery.sqladrian.github.io · read 5 Oct 2026
- Credentials
- The repository says SQL passwords are encrypted at rest with AES-256-GCM and DPAPI.github.com · read 5 Oct 2026
- Deployment
- The site offers a Windows desktop app and Windows Service mode, with service dashboards available from a browser via Kestrel HTTPS.sqladrian.github.io · read 5 Oct 2026
- Frameworks
- The site lists mappings for NIST 800-53, CIS Benchmarks, DISA STIG, ISO 27001, SOC 2, PCI-DSS, and HIPAA.sqladrian.github.io · read 5 Oct 2026
- Integrations
- The site says users can connect with Windows Auth, SQL Auth, or Azure AD, and that SQLWATCH is useful for long-term historical dashboards.sqladrian.github.io · read 5 Oct 2026
- Intended users
- The site names senior DBAs, database consultants, InfoSec and compliance teams, and CIOs as intended users.sqladrian.github.io · read 5 Oct 2026
- License
- SQLTriage is offered under GNU GPL v3, with free commercial use and modifications required to remain open.github.com · read 5 Oct 2026
- Limits
- The repository describes SQL Server as the supported database and says hosted SaaS dashboards are not offered.github.com · read 5 Oct 2026
- Monitoring
- Companion views include live sessions, blocking chains, query plans, wait stats, dashboards, and alerting.sqladrian.github.io · read 5 Oct 2026
- Purpose
- SQLTriage audits SQL Server and maps findings to compliance controls with cited evidence and a board-ready PDF.sqladrian.github.io · read 5 Oct 2026
- Read-only assessment
- Assessment checks query DMVs without installing an agent or changing SQL Server schema; separate opt-in deployment and remediation pages can write changes.sqladrian.github.io · read 5 Oct 2026
- Security
- The repository says the app is local-only by default with no telemetry, phone-home, or cloud dependency, and supports optional Azure Blob export.github.com · read 5 Oct 2026
- Support
- The repository directs bug reports and feature requests to GitHub Issues and community questions to GitHub Discussions.github.com · read 5 Oct 2026
