Supported dialects
SQLFix supports PostgreSQL, MySQL, SQLite, and BigQuery. You choose the dialect per query, and the output is written to match that engine's syntax. If your engine is not on that list, the query may need manual adjustment.
How the safety ruleset works
After a query is generated, the deterministic ruleset (sql-safety) checks it for injection-prone construction, DROP/TRUNCATE without a guard, and UPDATE/DELETE that affect every row, plus obvious dialect syntax problems. Findings are attached to the query so you can read them. It catches the patterns it knows; it is not a full validator.
The free tier
SQLFix offers a free tier with a limited number of workflow runs per day and a watermarked export. Paid tiers raise the run cap and add an audit log and JSON/CSV export. Pricing is listed on the product page; this article does not quote a number that may change.
When to still use a database reviewer
Anything that writes, deletes, or alters production data should be reviewed by a qualified person before it runs — especially on large or shared tables. SQLFix can help you draft and screen; it does not replace that review, and it does not guarantee the query is safe.
Data you send
The schema and question you paste are used to generate and screen the query. Treat anything you paste as sensitive if it contains real column names or sample values from production, and follow your own data-handling rules.
An honest limit
SQLFix is a drafting and review aid. It can help you write dialect-correct SQL and flag known dangers, but it does not guarantee correctness or safety, and it is not a database administrator.
Authoritative references
- PostgreSQL documentation: https://www.postgresql.org/docs/current/
- OWASP Top 10 — Injection: https://owasp.org/Top10/A03_2021-Injection/