Retool DB Security – Missing IP Whitelisting & Brute-Force Protection?

Hi @Daniel_Swenson,
I understand your concerns about database security. It is true that for retoolDB, while we have some security in place, we don't allow users to do things like IP whitelisting. These limitations can be addressed in one of two ways:

  1. Still on cloud, you could use a self-hosted postgres database and a postgres resource instead of a RetoolDB resource. All your apps and workflows can use them in the same way.
  2. You could go self-hosted which will allow you to use your own infra for RetoolDB rather than our cloud hosted postgres server.

Both of these options enable you to use your own postgres server, so you won't be limited to the security that we enforce for our cloud hosted DB.