CATable v1.0.1

Sovereign Database Studio & AI SQL Client

Rust 2024 Native • Multi-Driver (PG/MySQL/SQLite/DuckDB/Redis) • Blast Shield • SQLCipher 4

Modern, Native Multi-Driver Database Studio & AI SQL Client

Modern, lightweight, native multi-driver database studio and AI-powered SQL client. Direct async drivers for PostgreSQL, MySQL, SQLite, DuckDB, and Redis. Features zero-knowledge SQLCipher 4 vault, 1-click SSH bastion tunneling, production blast-radius shields, and schema-aware AI DBA copilot.

LIVE SQL STUDIO & VIRTUAL GRID INTERFACE

Multi-Tab SQL Studio & 1M+ Row Virtualized Data Grid

Native CATable v1.0.1 interface: SQLCipher vault connections, in-process DuckDB columnar analytics, blast-radius query shields, and schema-aware AI DBA.

CATable Database Studio — prod_cluster_primary [PostgreSQL 17.2 + DuckDB]
🔒 SQLCipher Vault 🛡️ Blast Shield: ACTIVE Latency: 0.42ms
Active Connections
🐘 production-pg ONLINE
🦆 analytics.duckdb LOCAL
⚡ cache-redis RESP3
🐬 legacy-mysql SSH JUMP
Tables (public)
▦ orders 1.4M rows
▦ users 82k rows
▦ transactions 3.8M rows
query_revenue.sql ×
explain_plan.sql
+ New Tab
SELECT o.id, o.customer_email, SUM(o.total_amount) AS revenue
FROM orders o
WHERE o.status = 'completed' AND o.created_at >= '2026-01-01'
GROUP BY o.id, o.customer_email LIMIT 5;
✓ 5 rows returned in 1.18ms
🛡️ Blast-Radius: Safe (READ-ONLY) Export: CSV, JSON, Parquet
#id (UUIDv7)customer_emailrevenue (USD)
10192e411-8a4b-7000-8801-000000000101[email protected]$1,249.00
20192e411-8a4b-7000-8801-000000000102[email protected]$890.50
30192e411-8a4b-7000-8801-000000000103[email protected]$2,140.00
NATIVE DATABASE CLIENT BENCHMARKED

Real-World Database Studio Benchmarks

Benchmarked on Linux x86_64 Fedora 44 with 10M row PostgreSQL table and 500MB DuckDB Parquet file.

Evaluation MetricCATable (v1.0.1)TablePlus (Native)DataGrip (JVM)DBeaver (Java/Eclipse)Beekeeper (Electron)
Cold-Start Launch< 400ms (Rust Native)~1,200ms~4,200ms~5,500ms> 3,800ms
RAM Usage (Idle)< 45 MB~90 MB~600 MB~450 MB> 280 MB
1M+ Row Table Scroll60 FPS (Virtual DOM)50 FPS40 FPS25-35 FPS (Lag)25 FPS
In-Process DuckDB Columnar OLAPEmbedded Native EngineNo supportJDBC Driver (Slow)Plugin onlyNo support
Production Blast-Radius ShieldRollback Dry-Run ShieldNoPartial safe-modeNoNo
Zero-Knowledge VaultSQLCipher 4 + Argon2idOS KeychainMaster PasswordPlaintext / BasicBasic
12 SOVEREIGN CAPABILITIES

Sovereign Database Studio Capabilities

Engineered for DBAs, data engineers, and backend developers who demand raw wire speed and bulletproof production protection.

🔌
6 Core Drivers

Multi-Engine Native Connectivity

Direct async drivers without JDBC bloat: PostgreSQL (async streaming & JSONB), MySQL & MariaDB (InnoDB telemetry), SQLite (WAL monitor & VACUUM), DuckDB (local Parquet/Arrow OLAP), and Redis (RESP3 protocol).

🔐
Argon2id Vault

Zero-Knowledge SQLCipher 4 Vault

Connection credentials, passwords, and SSH keys encrypted locally with Argon2id key derivation and AES-256-GCM. Zero plaintext stored on disk or sent over the wire.

🛡️
Blast Shield

Production Blast-Radius Protection

Pre-flight AST analysis and dry-run query shields inside temporary rollback transactions to automatically prevent unindexed UPDATEs and DELETEs from wrecking production.

⚡
1-Click Tunnel

1-Click SSH Bastion Host Tunneling

Instant and resilient connections to private databases behind AWS RDS VPCs, GCP Cloud SQL, or corporate intranets using integrated jump-host bastion tunnels.

🦆
DuckDB Parquet

In-Process DuckDB Columnar OLAP

Run analytical SQL queries directly on local or remote .parquet, .arrow, and .csv files at hardware wire speeds without configuring or maintaining any server.

📊
60 FPS Grid

1M+ Row Virtual Data Grid (60 FPS)

Supercharged DOM virtualized table rendering capable of scrolling millions of rows with zero stutter, inline cell editing, and instant CSV/JSON/Parquet export.

📐
Schema Diff

Visual Schema Migration & Diff

Visually compare schemas, tables, and indexes across Dev, Staging, and Production environments side-by-side with automated ALTER TABLE generation.

🤖
AI DBA Copilot

AI DBA Copilot (NL-to-SQL)

Intelligent DBA assistant translating natural language to optimized SQL queries, schema-aware indexing suggestions, and interactive visual EXPLAIN ANALYZE debugging.

🎭
PII Scrubber

PII Masking & Safe Data Export

Automated sensitive data obfuscation (emails, phone numbers, credit cards) and anonymized hashing for sanitized QA dumps without leaking confidential customer data.

🕸️
Visual ERD

Interactive Schema ERD Diagrams

Auto-generated visual entity relationship diagrams mapped directly from foreign keys and constraints, making complex database architectures effortless to navigate.

🏎️
Rust Native Core

Native Rust & Tauri v2 Architecture (<45MB)

Cold-start in under 400ms and idle memory footprint under 45 MB RAM—up to 15x lighter and more responsive than DBeaver or DataGrip.

🌐
Zero Telemetry

100% Offline & Zero-Telemetry Sovereignty

Functions completely offline with zero forced cloud accounts, zero query telemetry, and complete cryptographic data sovereignty in your own environment.

CATable Licensing & Pricing

Choose between our popular lifetime license or flexible team subscriptions.

CATable Community

Perfect for developers and analysts wanting a high-speed local multi-engine SQL client with zero telemetry.

$0 / free forever
  • ✓ Multi-driver: SQLite, DuckDB, Postgres, MySQL, MariaDB, Redis
  • ✓ Virtualized data grid scrolling up to 1,000,000+ rows
  • ✓ Multi-tab SQL query editor with syntax highlighting
  • ✓ Local connection vault (zero telemetry)
  • ✓ Rapid export to CSV and JSON
Launch Special ($29)

Sovereign Pro Lifetime

For DBAs and lead engineers who demand SQLCipher encryption, production blast shields, and schema-aware AI DBA copilot.

$29 / one-time payment (launch special, reg $149)
  • ✓ All features from CATable Community
  • ✓ Zero-Knowledge SQLCipher 4 + Argon2id vault
  • ✓ 1-Click SSH Bastion Host Tunneling into VPCs
  • ✓ Production Blast-Radius Shield (dry-run & auto-rollback)
  • ✓ Visual Schema Migration Diff & ALTER TABLE generator
  • ✓ AI DBA Copilot (NL-to-SQL & visual EXPLAIN)
  • ✓ Interactive Schema ERD diagrams & PII Masking
  • ✓ Lifetime commercial license & all minor updates

Pro Subscription

Flexible monthly subscription option for teams needing encrypted multi-device relay sync.

$10 / per month (or $108/year)
  • ✓ All Pro features active continuously
  • ✓ Encrypted multi-device sync relay
  • ✓ Continuous updates for latest AI DBA models
  • ✓ Priority direct developer technical support
  • ✓ Cancel anytime with zero long-term commitment

Frequently Asked Questions (FAQ)

Everything you need to know about SQLCipher vaults, blast-radius shields, and native drivers.

Does CATable send my database credentials or query data to any remote server?

Not at all. Connection credentials, passwords, and SSH keys are encrypted using an in-memory Argon2id key derivation and SQLCipher 4 directly on your local filesystem. All query traffic travels point-to-point directly to your database with zero intermediate telemetry.

How does the Production Blast-Radius Protection work?

Before executing dangerous mutating commands (such as unindexed UPDATE or DELETE operations), CATable performs pre-flight AST analysis and executes a dry-run inside a temporary transactional sandbox that is immediately rolled back. It alerts you to the exact row count impact before committing.

How does DuckDB columnar querying work without a dedicated database server?

DuckDB is embedded directly in-process within CATable's native Rust core. You can drag and drop local or remote .parquet, .arrow, and .csv files and run complex analytical SQL queries instantly at raw hardware wire speeds without configuring or managing any server infrastructure.

How do I connect CATable to private databases inside an AWS RDS or GCP VPC?

CATable includes built-in 1-Click SSH Bastion Host Tunneling. Provide your jump-host public IP and SSH key, and CATable will automatically manage persistent encrypted tunnels to your private database instances without requiring external SSH scripts or background terminal processes.