Overview
DriftLock is VPC-native schema drift monitoring for teams that move data at scale. It continuously fingerprints the structure of your Redshift tables, S3-based lakes, and partner feeds, then diffs every scan against the last known-good snapshot. When an upstream source adds, drops, or retypes a column, DriftLock catches the change and alerts the right people before silent breaks reach production dashboards and dbt models.
At its core is a fast Rust fingerprint engine that hashes schema shape, so scans stay light and diffs stay precise. DriftLock keeps a versioned schema history for every source, tags each event with a severity that matches its blast radius, and (on Team and Enterprise) routes notifications to Slack or PagerDuty and adds semantic and value drift, lineage blast radius, and audit export for governance reviews.
DriftLock ships as a single container that bundles the dashboard, API, CLI, fingerprint engine, and database migrations, with an optional bundled Postgres. Run it entirely inside your VPC, or point DATABASE_URL at the RDS, Aurora, or Postgres you already trust. Most teams reach a first successful scan the same day they launch, without a consulting engagement. Built for data engineers, analytics engineers, platform leads tracking MTTR, and governance stakeholders who need a defensible record of schema change.
Highlights
- Catch schema drift before it cascades. A Rust structural fingerprint engine hashes schema shape on every scan and diffs against the last good snapshot, flagging column adds, drops, and type changes before they break dashboards and dbt models.
- VPC-native, deploy in an afternoon. Ship one Docker container bundling the dashboard, API, CLI, fingerprint engine, and migrations, with optional Postgres. Runs entirely in your network, or point DATABASE_URL at your own RDS, Aurora, or Postgres.
- Severity-aware alerts and audit history. Keep a versioned schema history per source, route alerts to Slack or PagerDuty by blast radius, and export a defensible audit trail for governance reviews (Team and Enterprise).
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
DriftLock Team (annual subscription) | Annual DriftLock Team entitlement. Monitor up to 10 sources with structural, semantic, and value drift detection, the full connector matrix, lineage blast radius, versioned schema history, and Slack and PagerDuty alerts. Deploys as a single VPC-native container with bundled or bring-your-own Postgres. Business-hours support included. Add the "Additional monitored source" dimension to go beyond 10 sources. | $500.00 |
DriftLock Enterprise (annual subscription) | Annual DriftLock Enterprise entitlement. Monitor up to 50 sources with everything in Team plus data contracts and quarantine, RBAC and audit logging, private VPC deployment, and ML-based change classification. Includes named support and access to AWS Marketplace metering and private offers. Add the "Additional monitored source" dimension to go beyond 50 sources. | $1,000.00 |
Additional monitored source | One extra monitored source beyond the quantity included in your DriftLock Team or Enterprise subscription. A source is any table, dataset, S3 prefix, or partner feed that DriftLock fingerprints and tracks for drift. Add one unit for each additional source you want under continuous monitoring. | $300.00 |
Vendor refund policy
Paid DriftLock contracts are refundable within 14 days of purchase if the product does not meet your needs. To request a refund, email sales@ddvand.com with your AWS account ID and order details. Refunds are processed through AWS Marketplace.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
DriftLock single container (ECS and EKS)
- Amazon ECS
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
DriftLock 1.0.0 is the first general availability release.
What's new
- VPC-native schema drift monitoring for Amazon Redshift, Amazon S3 lakes, and partner feeds.
- Rust structural fingerprint engine that hashes schema shape for fast scans and precise diffs.
- Fleet dashboard showing healthy versus drifting sources, recent events, and per-source timeline and snapshot history.
- driftlock CLI for adding sources, running scans, and automating checks from CI or cron.
- Single container that bundles the dashboard, API, CLI, fingerprint engine, and database migrations, with an optional bundled PostgreSQL for evaluation.
- Bring-your-own-database support: point DATABASE_URL at Amazon RDS, Aurora, or any PostgreSQL and migrations run automatically on boot.
- Health endpoint at /api/v1/health for load balancer and orchestrator checks.
This release establishes the structural detection baseline. Semantic and value drift, additional connectors, lineage blast radius, and Slack and PagerDuty routing are available on higher tiers.
Additional details
Usage instructions
Overview DriftLock runs as one container that serves the dashboard and API on port 8080. Use the bundled PostgreSQL for evaluation, or your own Amazon RDS or Aurora PostgreSQL for production.
Quick start (evaluation, bundled PostgreSQL)
Run the subscribed image with a demo source seeded:
docker run --rm -p 18080:8080
-e DRIFTLOCK_SEED_DEMO=1
-v driftlock-data:/var/lib/postgresql/data
709825985650.dkr.ecr.us-east-1.amazonaws.com/dd-vand/driftlock:1.0.0
Open http://localhost:18080 to explore the seeded demo source.
Production (bring your own PostgreSQL) Set: DATABASE_URL = postgres://USER:PASSWORD@HOST:5432/driftlock?sslmode=require DRIFTLOCK_BUNDLED_DB = 0 Migrations run automatically on boot. Store credentials in AWS Secrets Manager or SSM Parameter Store.
Run on Amazon ECS
- Create a task definition with one container using this image.
- Map container port 8080 to a target group behind an Application Load Balancer.
- Inject DATABASE_URL and DRIFTLOCK_BUNDLED_DB=0 from Secrets Manager.
- Set the container health check to GET /api/v1/health.
Run on Amazon EKS
- Create a Deployment with one replica using this image.
- Expose port 8080 with a Service (and Ingress if public).
- Provide DATABASE_URL via a Kubernetes Secret; set DRIFTLOCK_BUNDLED_DB=0.
- Set readiness and liveness probes to /api/v1/health.
First scan Use the bundled driftlock CLI to add a source and run a scan (see the deploy guides linked below), or set DRIFTLOCK_SEED_DEMO=1 to populate the dashboard with a demo source immediately.
Key environment variables DRIFTLOCK_ADDR listen address (default :8080) DATABASE_URL PostgreSQL connection string DRIFTLOCK_BUNDLED_DB 1 = bundled Postgres, 0 = external DRIFTLOCK_SEED_DEMO 1 = load a demo source for evaluation
Support Product help: support@ddvand.com Sales and Marketplace: sales@ddvand.com Deploy guides: https://ddvand.com/#/deploy
Support
Vendor support
Product support: support@ddvand.com Sales, Marketplace, and private offers: sales@ddvand.com Phone: +1 (415) 555-0142 Docs and deploy guides: https://ddvand.com/#/deploy
Starter includes community support. Team includes business-hours email support with next-business-day response targets. Enterprise adds named support, private VPC deployment guidance, and AWS Marketplace metering and private offers. For urgent production issues, email support@ddvand.com with "URGENT" in the subject line.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.