Postgres and Open Source Experts

Is Trust Gone? Has the supply chain attacks eroded the trust we have in public repositories

Engineering leaders work hard to protect their teams from burnout — improving processes, hiring strong talent, and adjusting on-call rotations. But if your team still looks exhausted, the real issue may not be the rotation at all. It’s often the underlying database and infrastructure quietly triggering the same incidents over and over.

Released in July 2025, NIST SP 800-63 Revision 4 introduced new requirements for authentication strength, identity proofing, and federation security. Many organizations still haven't assessed their systems against these updated standards. Learn what changed, why it matters for compliance, and how to evaluate your current identity controls against the new framework.

PgManage now supports Microsoft SQL Server and includes numerous UI improvements and features intended to make your daily database work more efficient. See the blog post for a feature overview and insights into our decision‑making process.

PostgreSQL 13 has officially reached end of life as of November 13, 2025, leaving organizations without security patches or community support. Learn your options for upgrading to a supported version—or extending security coverage with PgLTS.

In a previous post, we explored the importance of right-sizing PostgreSQL environments and avoiding the trap of overprovisioning for peak demand. While architecture choices play a major role in cost optimization, the work doesn’t stop there. For technical teams including DBAs, system architects, and engineering directors, query performance and workload patterns offer some of the most direct, controllable levers for reducing cost without sacrificing quality.

Query Optimization: A Core Cost …

The PostgreSQL Global Development Group has released PostgreSQL 18, delivering the most significant performance improvements in recent years. This latest version transforms database I/O operations and streamlines the upgrade experience for organizations worldwide.

Amazon Aurora PostgreSQL can be a powerful starting point for teams adopting PostgreSQL in AWS. But as usage grows, so do the needs for cost transparency, fine-grained tuning, and architectural flexibility. Here's why more teams are choosing Amazon RDS for PostgreSQL or EC2 as they scale.

PgManage 1.3.1 is now available with fixes across PostgreSQL, Oracle, MariaDB, and SQLite3, plus updated dependencies and UI refinements. Learn what’s new and explore PgManage Enterprise Edition with remote access, multi-user support, and OAuth2 integration.

The July 31st advisory from CISA and the U.S. Coast Guard (AA25-212A) is less about what happened and more about what could have. A proactive threat hunt at a U.S. critical infrastructure organization revealed no active compromise, but it uncovered systemic weaknesses like insecure credentials, unrestricted remote access, and insufficient monitoring. This is a textbook case of “security theater”: policies and tools on paper, without enforcement in practice. The takeaway …