restoredrill
CLI that proves your PostgreSQL backups actually restore, for compliance
restoredrill is a free, open-source CLI that proves a PostgreSQL backup actually restores by fetching it, restoring it into a throwaway container, running checks the user defines, and writing a timestamped JSON evidence report — the kind of proof SOC 2, ISO 27001, or AWS Foundational Technical Review audits require. Every check is fail-closed, so a check that can't run counts as a failure rather than a silent skip, and it's designed to run on a schedule and feed real logs into an audit packet rather than just a policy document claiming testing happens. It's for teams under compliance frameworks who need to prove — not just claim — that their backups restore, on a schedule that matches what auditors actually expect.

