Skip to main content

Stack Scan Audits Catalog Pricing Docs Scrab

Bundles/database-design-operations

Database Design & Operations Audit

database-design-operations · v1.1.1 · paid

Evaluates database schema design, query patterns, migration safety, access control, backup strategy, and operational monitoring for SQL databases.

Schema Design

schema-design · weight 0.25

Every table has an explicit primary key
ab-000897
critical
Foreign keys enforce referential integrity between related tables
ab-000898
critical
Indexes exist on columns used in WHERE, JOIN, and ORDER BY clauses
ab-000899
high
NOT NULL constraints on required fields
ab-000900
high
Appropriate data types for each column (no stringly-typed data)
ab-000901
medium
Consistent naming convention across tables and columns
ab-000902
low

Query Patterns

query-patterns · weight 0.25

No N+1 query patterns
ab-000903
critical
All user-facing queries use parameterized inputs (no string interpolation)
ab-000904
critical
Connection pooling configured (not new connection per request)
ab-000905
high
Transactions used for multi-step mutations
ab-000906
high
Queries select specific columns instead of SELECT *
ab-000907
low

Migration & Versioning

migration-versioning · weight 0.15

A migration tool or framework is in use
ab-000908
high
Migrations are non-destructive (no data loss without explicit intent)
ab-000909
high
Migrations have rollback capability (down migrations or revert scripts)
ab-000910
medium
All migration files are committed to version control
ab-000911
medium
At least 1 seed data script exists for development and testing
ab-000912
low

Security & Access Control

security-access · weight 0.2

No hardcoded database credentials in source code
ab-000913
critical
Row-Level Security (RLS) or equivalent access control on multi-tenant tables
ab-000914
high
Database user follows least privilege (not using superuser for application)
ab-000915
medium
Sensitive data columns use encryption (at-rest encryption beyond platform defaults)
ab-000916
medium
Database connections use SSL/TLS
ab-000917
high

Backup & Recovery

backup-recovery · weight 0.1

Backup strategy is documented
ab-000918
high
Point-in-time recovery (PITR) is available
ab-000919
medium
Restore procedure has been tested at least 1 time with documented results.
ab-000920
medium
Database credentials are rotated on a defined schedule
ab-000921
low

Monitoring & Operations

monitoring-ops · weight 0.05

Health check endpoint includes database connectivity test
ab-000922
medium
Slow query logging or monitoring is configured
ab-000923
low
Connection pool metrics are monitored
ab-000924
info

The AI Slop Detector. Find out what your AI got wrong before your users do.

We catch the slop.

Product

Stack Scan
Audits
Catalog
Bundles
Taxons
Packs
Pricing

Learn

Docs
Visual Guide
Benchmarks
Demo
Blog
Scrab

Connect

About
Contact
X (Twitter)
Privacy
Your Privacy Choices
Terms

© 2026 AuditBuffet · Built for the people shipping scary-fast.

Free Stack Scan · Pro from $9/mo