FoxByte
On-premPostgreSQL 18 · no telemetry

Every schema change,
on the record.

FoxByte is PostgreSQL on servers you control. Its Blackbox records who changed what, and from which tool, in a tamper-evident hash chain, and with signed anchors kept off the machine (Enterprise) not even your own admins can rewrite it unnoticed. People and AI work on instant copies, so main stays exactly as you left it.

$ curl -fsSL https://get.thefoxbyte.com/install.sh | sh
macOSLinuxWindowsRuns on your hardware

On macOS and Windows the engine runs in a small Linux VM that the first start downloads: a few minutes, once.

you@laptop — zsh

A terminal creates a copy of main for an AI agent, records an ALTER TABLE in the Blackbox, blocks a DROP TABLE by policy, and verifies the Blackbox hash chain, while main stays untouched.

Moves in from
PostgreSQLMySQLMariaDBMongoDB.sql.csv.json.ndjsonPrismaDrizzleSQLAlchemyDjangoRailsGORM
The Blackbox

A record you can prove, not just a log you can read

Every change to a table, view, function or privilege is written down as it happens: who made it, person or agent, on which branch, and the tool the client reported. Clients log in as their own Postgres role, so the login on the record cannot be forged.

  • Tamper-evident for free. Every entry is hash-chained to the one before it, and fox blackbox verify checks the whole chain in every edition.
  • Insider-proof in Enterprise. Signed anchors are written on a schedule and kept where your own admins cannot rewrite them, such as an Object Lock bucket.
  • A way back, not only evidence. Point at any entry and get main as it was just before it, as a new branch. Main is left alone.
$ fox blackbox integrity
#118ALTER TABLE orders ADD note3b1e
#119CREATE INDEX ON orders (day)8c02
#120GRANT SELECT ON ordersf47a
#121ALTER TABLE users ADD plan19dd
checkpoint #118–121merkle root a91f…c3 · signed ✓
s3://audit-anchors · Object Lock · 365 days
recording…proof even against a superuser
Not just Postgres

Postgres, suited up.

Inside is the PostgreSQL you already trust, untouched: the same storage engine, the same planner, on your own disk. FoxByte builds the suit around it, and every capability Postgres was missing locks into place.

insidePostgreSQL 18stock · unmodified
Branchesa full copy in seconds
Blackboxevery schema change, on record
Realtimeevery row, live
Time travelrewind within the archive
Guardrailsstops mistakes first
Migrationsin from 8 sources
ETL pipelinestested before they land
High availabilitya standby on call
How it works

Branch. Record. Stream. Protect.

Four things every team running Postgres wishes it had. FoxByte gives you all four, on hardware you control.

01 · Branch

A full copy in seconds

Give every developer, test run, pull request or AI agent its own complete copy of the database. Copies share storage until they change, sleep when idle, and never touch main.

$ fox branch create qa
main
qa
0 of 48 blocks written48 still shared with main
02 · Blackbox

Every schema change, on record

Every change to a table, view, function or privilege is written down the moment it happens, with the login that made it and the tool it reported. Entries are hash-chained, so an edit shows, and any entry is a way back to main as it was just before.

$ fox blackbox verify
you@team.devCREATE TABLE notes9f2c
priya@team.devALTER TABLE users ADD plan41ab
you@team.devGRANT SELECT ON notesc07e
agent-claudeDROP TABLE invoices · blockede5d1
recording… 1 entrieswho, what, when, which tool
03 · RealtimeEnterprise

Every row, live, on your servers

Subscribe to inserts, updates and deletes the moment they commit, straight from your own database. No third-party cloud in the middle. Drop off, reconnect, and the feed replays what you missed.

$ fox realtime enable orders
idstatus
1041paid
1042packed
1043new
1044shipped
1045new
live from your own serverreconnect and it replays what you missed
04 · Protect

Mistakes stop before they land

Dropping a table needs an admin. An agent’s DELETE or UPDATE without a WHERE is refused. In the next release, an agent that tries to change more than 100 rows is stopped at row 101, and nothing is lost.

agent-claude · branch ai-sandbox
DELETE FROM orders WHERE 1 = 1;
rows changed by this statementlimit 100
0of 1,000,000
counting…14.5 ms on a million-row table, 4-vCPU test VM · next release
Your data, moving

Bring your data in. Shape it. Keep it flowing.

Leaving another database shouldn’t be a project. FoxByte imports from the systems you already run, and turns raw tables into clean ones with pipelines you can trust.

Migrate from almost anything

Point FoxByte at PostgreSQL, MySQL, MariaDB or MongoDB, or hand it a .sql, .csv, .json or .ndjson file. Every import lands in its own branch, so you can check it before anything depends on it. For live systems, keep it in sync and cut over when you’re ready.

$ fox import --from mysql://…/shop --as shop
$ fox import --from postgres://… --continuous --as live
$ fox import-cutover live

ETL pipelines that test firstEnterprise

Write transformations as plain SQL models and add data-quality tests in one JSON spec. Every run lands in a fresh branch first, so bad data fails a test instead of reaching your reports. Pipelines are experimental today.

$ fox pipeline run revenue.json
  stg_orders   ✓ not_null(order_id)
  fct_revenue  ✓ unique(day)
Editions

Safety is free. Always.

The Blackbox, backups and guardrails are in every edition. Enterprise adds the live feed, pipelines and controls growing teams ask for next.

Standard

Freeopen source, AGPL-3.0

  • Instant branches that scale to zero
  • The Blackbox and its hash chain
  • Backups and point-in-time restore
  • Imports from Postgres, MySQL, MariaDB and MongoDB
  • Guardrails for people and agents
  • Web console, MCP server and SDKs
Install Standard

Using FoxByte doesn’t make your app AGPL. The SDKs are Apache-2.0.

Enterprise

Let’s talklicensed per machine

  • Everything in Standard, plus
  • Realtime change feed, on your servers
  • ETL pipelines with data tests
  • Signed Blackbox anchors on a schedule
  • Your own policy rules and impact analysis
  • Change requests from a branch to main
  • Compliance export bundle
Contact sales

Upgrade in place with one command. Your data, accounts and keys stay put.

FAQ

Questions, answered

No. FoxByte is a full PostgreSQL platform for people first: a copy for every developer and test, the Blackbox, backups, time travel and migrations. Working safely with AI is one more thing it does well.

No. FoxByte runs on your own laptop or server, and so do Realtime, the Blackbox and the console. Backups only leave the machine if you send them to a bucket you choose.

No. It’s PostgreSQL 18, unmodified. Your drivers, ORM and SQL work as they do today. You change one connection string.

One command. fox import brings in PostgreSQL, MySQL, MariaDB, MongoDB or files, each into its own branch. For a live system, keep it in sync and cut over when you’re ready.

They work on their own copy, never on main. Destructive commands are blocked and deletes without a WHERE are refused; in the next release, anything past 100 rows of a table is stopped too. An agent can propose changes, but only a person can approve them.

No. Your app talks to FoxByte over the standard Postgres protocol, and the client SDKs are Apache-2.0. The AGPL applies only if you modify FoxByte itself and offer it as a service.

Get started

Your data. Your servers. Your rules.

Install FoxByte in a few minutes. Bring your database over with one command.

$ curl -fsSL https://get.thefoxbyte.com/install.sh | sh