Security benchmarking · cross-platform

Temper

Harden without the brittle.

Point Temper at a database and it discovers what's running, audits it against the matching CIS Benchmark, and proposes and applies the fixes. One desktop app — macOS, Windows and Linux — for the whole discover → audit → remediate loop.

Get the trial Invitation-only · 15-day trial

macOS · Windows · Linux Read-only audit Nothing changes without your OK

PostgreSQL 16CIS Benchmark v1.0.0

82%Compliant

3.1.2 · logging_collectorPass

5.3 · password storageFail

6.2 · TLS enforcedPass

7.4 · WAL / replicationReview

18 fail · 12 reviewApply fixes ▸

What it does

From "is this secure?" to "it's fixed."

Temper replaces two brittle manual scripts — a SQL audit and a host shell audit — with one guided loop that discovers, scores, and remediates.

Discovers your estate

Connect a database and Temper detects the engine and version and picks the matching CIS Benchmark — PostgreSQL 13–18 today.

Audits, read-only

It reads settings, catalogs and file metadata — nothing is modified — and scores every control PASS / FAIL / REVIEW.

Explains each control

Every finding shows the observed vs. expected value and the CIS rationale, with the section category so you know why it matters.

Proposes the fix

A remediation wizard generates the exact change — SQL, or an OS-aware host script (bash for Linux/macOS, PowerShell for Windows).

Applies on your say-so

Apply a fix and re-audit to confirm it passed — always behind an explicit confirmation. TLS verification is on by default.

Runs everywhere

One Electron app for macOS, Windows and Linux, auditing managed (RDS/Aurora/Cloud SQL/Azure) and self-managed hosts alike.

The loop

Discover · Audit · Propose · Fix.

1 Discover

Find what's there

Detect the engine, version and host type, then select the matching benchmark automatically.

2 Audit

Score every control

Read-only checks across logging, roles, TLS, storage and host files — with a clear compliance score.

3 Propose

Generate the fix

Exact SQL or an OS-aware host script for each failing control, with the CIS remediation prose.

4 Fix

Apply & re-audit

Confirm, apply, and re-run to prove the control now passes — no guesswork left behind.

Specification

One app, three platforms.

Temper is a direct download for macOS, Windows and Linux. The preview is invitation-only and runs for 15 days from first launch on each machine.

ProductTemper

Version1.0.0

PlatformsmacOS · Windows · Linux

EngineElectron

AccessInvitation-only

Trial15 days / machine

AuditsCIS PostgreSQL Benchmark 13–18 · managed & self-managed

Get the trial

Have an invitation key?

Enter the download key we sent you along with your email. We'll email your personal license key and start your download for your operating system. The trial runs for 15 days from first launch.

No invitation yet? Temper is in a closed preview — reach us at [email protected].