LeakLens

LeakLens is a web app + lightweight agent that monitors database activity and flags high-risk access patterns in near real time. It focuses on practical leak vectors most teams miss: broad SELECTs on sensitive tables, sudden spikes in row reads, unusual export-like query shapes, and access from new service accounts or IP ranges. Instead of trying to be a full SIEM, it provides database-native “exfiltration guardrails” with fast setup: connect read-only to Postgres/MySQL and optionally ingest audit logs from cloud providers. Alerts are opinionated and actionable, mapping each event to impacted columns (PII/PHI/PCI), the actor, and a suggested response (revoke role, rotate creds, tighten RLS, add query limits). It also generates weekly “exposure reports” that show which roles can touch sensitive fields and where least-privilege is drifting. This is a combination traditional + AI app: rules first, AI for summarization and triage.