Feature
Least privilege in the database
The collector role can only insert and the viewer role can only select, with row-level security forced on every table.
Two roles own all access: collector gets INSERT and viewer gets SELECT on the three tables. Each app logs in with its own login role that inherits one of them.
Row-level security is forced on every table, and the default public, anonymous, authenticated and service roles are revoked from the schema.
Neither app can update or delete a row, so history cannot be rewritten through them.
More features
All features →- 01
One page for the whole fleet
Every target’s latest state per key, plus the last 20 collector runs, on one read-only page.
- 02
Silence reads as stale
A target with no ok drift snapshot within STALE_AFTER_HOURS is flagged. A dead collector turns every target stale.
- 03
Never a secret value
The database stores 12-character fingerprints, not values. The viewer compares them on the server and sends only the verdict.