Bytebase

Open source database DevSecOps platform that centralizes schema migrations, change management, and data access governance. Provides a unified control plane for developers, DBAs, and platform teams to collaborate on database changes with approval workflows, SQL linting, and audit trails while governing production access through role-based permissions and dynamic data masking.

Built by former Google Cloud SQL engineers. Differentiates from CLI migration tools like Flyway and Liquibase by offering a full platform experience with a collaborative web interface, GitOps integration, and enterprise controls. Sits between team-based migration tools and traditional SQL clients like DBeaver or DataGrip, adding team collaboration and security layers that individual SQL clients lack. Supports over 20 database systems and provides more than 100 SQL lint rules for anti-pattern detection.

Key capabilities:

• Database CI/CD with GitOps workflow, branching, and optional Database-as-Code via GitHub, GitLab, Bitbucket, or Azure DevOps
• Structured change workflow with multi-step approvals, risk analysis, and 1-click DML rollback
• 100+ SQL lint rules for anti-pattern detection and consistent SQL style across the organization
• Just-in-time IAM-based database permissions with approval flow and audit logging
• Dynamic data masking with role-based policies and data classification
• Fleet-wide batch changes across multiple environments or partitioned databases
• On-premise deployment with full source code available

Use cases: teams standardizing database schema changes from non-prod to prod, platform engineers rolling out migrations across many instances, security teams enforcing compliance with audit logs and data masking for PII, and DBAs replacing shared credentials with role-based query access. Integrates with existing CI/CD pipelines and VCS providers for database migrations as code.