shouldiuse.io

VERDICT

Should I use Bytebase?

Database governance platform for schema migration, change review, data fix, and query access across Postgres, MySQL, SQL Server, Oracle, and 20+ engines. - bytebase.com

Depends. Buy if you run many databases across multiple teams and need approvals, audit trails, and controlled query access. Skip it if a lone engineer with Flyway or Alembic already covers your schema changes.

Confidence

Medium. Based on 25+ public sources: G2, Reddit threads, official docs, CVE databases, pricing aggregators, and vendor case studies. Few numeric ratings available; Reddit quotes truncated at source.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free / Community

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Pro~$20/user/mo
EnterpriseCustom

Best for

  • Platform teams managing many databases
  • Compliance-heavy orgs needing query approvals and masking
  • Companies with database-per-tenant architectures
  • Teams standardizing migrations across engines

Not for

  • Solo devs with one database
  • Small teams already happy with Flyway or Liquibase
  • Anyone wanting a zero-admin hosted tool
  • Orgs unable to run another self-hosted web app

Gotchas - check before you buy

medium

Self-hosting means you manage upgrades; updates have caused regressions per G2

medium

Guess: some advanced governance and compliance features likely gated to paid tiers

low

Pro starts ~$20/user/month per SaaSWorthy; enterprise pricing requires talking to sales

Pros and cons

Pros

  • Supports 20+ database engines from one console
  • Customizable SQL review rules enforced before changes deploy
  • GitOps integration to manage schema changes via repos
  • Just-in-time access control and column data masking
  • Open-source core, self-hostable

Cons

  • Updates have occasionally caused regressions
  • Newer than Flyway/Liquibase with smaller track record
  • Sits between users and databases — extra component to run and secure

Sources & method

Analyzed 9/20/2026 - 16 sources - SOC 2 Type II and HIPAA compliance claimed; a few 2022 CVEs (CVSS 4.3) and one improper-auth advisory, all older.

official x4review x7security x3news x2
  • CVE-2022-32169, Medium severity (CVSS 4.3); the application did not properly restrict access.
  • CVE-2022-32170, Medium severity (CVSS 4.3); listed as low priority by Vulners.
  • GHSA-5r3p-6rj5-7937, Improper authentication vulnerability disclosed against Bytebase.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 16

    Sources

  • Analyzed

  • Value for money: 4/5. $20 per seat undercuts enterprise governance rivals
  • Ease of use: 4/5. Redditors call it a good choice; GUI included
  • Feature depth: 5/5. Review rules, GitOps, masking, JIT access, 20+ engines
  • Support quality: 3/5. No direct support signal; update regressions reported
  • Security posture: 3/5. SOC 2 and HIPAA claimed; 2022 auth flaws exist
  • $20/user/mo Starting price Pro plan, per SaaSWorthy
  • Yes Free tier Community edition, open source
  • 20+ Databases supported Postgres, MySQL, Oracle, SQL Server and more
  • Seed Funding Latest round per CB Insights

Pricing

Free / Community

$0

  • Self-hosted
  • Open-source core

Pro

~$20/user/mo

  • Paid per-user team plan

Enterprise

Not disclosed

  • Contact sales

Security

SOC 2 Type II and HIPAA compliance claimed; a few 2022 CVEs (CVSS 4.3) and one improper-auth advisory, all older.

  • CVE-2022-32169Medium severity (CVSS 4.3); the application did not properly restrict access.⁶
  • CVE-2022-32170Medium severity (CVSS 4.3); listed as low priority by Vulners.
  • GHSA-5r3p-6rj5-7937Improper authentication vulnerability disclosed against Bytebase.⁷

What users say

Reddit and G2 users broadly praise the SQL review/approval flow and multi-engine support, with occasional complaints about update regressions.

“This looks pretty good. It's CI/CD for Dat…”
Reddit, r/dataengineering
“Bytebase would be a good choice! Support both GUI and…”
Reddit, r/devops

Companies that use it

  • ¹
  • Salla
  • Longbridge Whale
  • CVTE
  • Harvard University
Full analysis

Based on 25+ public sources: G2, Reddit threads, official docs, CVE databases, pricing aggregators, and vendor case studies. Few numeric ratings available; Reddit quotes truncated at source.

Strong database governance for orgs with many DBs and reviewers; overkill if one app, one database, or plain Flyway works.

Methodology

Based on 25+ public sources: G2, Reddit threads, official docs, CVE databases, pricing aggregators, and vendor case studies. Few numeric ratings available; Reddit quotes truncated at source.

Sources

  1. Bytebase homepagebytebase.com
    official
  2. Bytebase Pricingbytebase.com
    official
  3. Bytebase Docs — Review Rulesdocs.bytebase.com
    official
  4. Bytebase Docs — Database Permission Overviewdocs.bytebase.com
    official
  5. Bytebase Security Overviewbytebase.com
    security
  6. OSV — CVE-2022-32169osv.dev
    security
  7. GitHub Advisory GHSA-5r3p-6rj5-7937github.com
    security
  8. G2 Reviews — Bytebaseg2.com
    review
  9. G2 Reviews — Bytebase DevOpsg2.com
    review
  10. SaaSWorthy — Bytebase Pricingsaasworthy.com
    review
  11. Reddit r/dataengineering — Anyone using ByteBase for schema management?reddit.com
    review
  12. Reddit r/devops — Database DevOps toolsreddit.com
    review
  13. Reddit r/dataengineering — Liquibase or Bytebase?reddit.com
    review
  14. Reddit r/dataengineering — Why don't you like Bytebase?reddit.com
    review
  15. Help Net Security — Bytebase: Open-source database DevOps toolhelpnetsecurity.com
    news
  16. CB Insights — Bytebasecbinsights.com
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.