SqlGuard logo SqlGuard

Deterministic SQL validation for CI.

SqlGuard is a commercial, non-SaaS CLI tool that validates SQL Server behavior in your CI pipeline — focused on correctness, security, and regression prevention.

CI-first Offline-capable No agents No SaaS Deterministic output
Start free evaluation Read docs Download releases

Everything public lives in the sqlguard repository: documentation, examples, and release binaries.

Evaluate first. License commercial use when you are ready.

SqlGuard runs locally and in your CI environment. Evaluation does not require an account, payment card, trial license, or online activation.

Free evaluation

Download SqlGuard and test it in development, testing, evaluation, or personal projects. Commercial and production use requires a license.

  • No signup or payment card
  • No trial license or expiration to manage
  • No online activation or phone-home check
Start free evaluation Getting started

Commercial license

Request a time-limited, per-company license for production environments, commercial projects, and business operations.

  • One signed license file for your organization
  • Usable across the organization's machines and CI environments
  • Validated locally without a license server
Request commercial license

The request opens a prefilled email asking only for the company name, domain, and intended commercial use.

How SqlGuard works

SqlGuard turns a declarative YAML spec into deterministic CI pass/fail results for SQL behavior.

Step 1 — Declare expectations (YAML) spec

Describe what must remain true about your database behavior (shape, invariants, permissions). 

# sqlguard.yaml (excerpt)
suites:
  - name: Orders schema
    connection: main
    checks:
      - type: queryContract
        sql: SELECT * FROM Orders
Step 2 — Run in CI (GitHub Actions) execute

Add SqlGuard as a step in your CI workflow. Output is deterministic and machine-readable. 

# .github/workflows/ci.yml
- name: SqlGuard validation
  run: |
    sqlguard validate-spec --spec sqlguard.yaml
    sqlguard run --spec sqlguard.yaml --out report.json
Step 3 — CI sees pass/fail gate

Your CI treats it like tests. Exit codes follow standard conventions (0 = pass, non-zero = fail). 

✔ Orders schema
  ✔ queryContract: Orders columns unchanged

Test Suites: 1 passed, 0 failed
Exit code: 0

Designed for platform and backend teams

Correctness

  • Catch unintended behavior changes early
  • Deterministic results for CI

Security

  • Permission regression checks
  • No secrets in output (redaction)

Pragmatic

  • No SaaS, no agents, no dashboards
  • Public docs + private implementation

What SqlGuard is (and isn’t)

It is

  • A deterministic CI gate for SQL Server / Azure SQL changes
  • Designed for CI pipelines (GitHub Actions, Azure DevOps, Jenkins)
  • Focused on correctness, security checks, and regression prevention

It isn’t

  • A hosted SaaS service
  • A dashboard or monitoring/observability agent
  • A general-purpose query runner or ORM migration tool

Contact

Commercial and security contact channels for SqlGuard.

Licensing

sales@sqlguard.dev

Support

support@sqlguard.dev

Security

security@sqlguard.dev

Vulnerabilities: please email security@sqlguard.dev instead of opening public issues.