plpgsql_wrap v1.0 released

Toronto, Canada - May 19th, 2026

## PostgreSQL plpgsql wrap utility

`plpgsql_wrap` is a PostgreSQL extension used to obfuscate PLPGSQL source code, making it unreadable to users while remaining fully executable by the PostgreSQL database. It is primarily used to protect intellectual property or sensitive business logic when delivering code to third parties. It is similar to the Oracle WRAP function and utility.

plpgsql_wrap v1.0 has been released, this is the first public release. It is compatible with PostgreSQL versions >= 12.

Write stored procedures with `LANGUAGE plpgsql_wrap;` source is validated, then AES-256-GCM encrypted directly into `pg_proc.prosrc`.

Users cannot look at store procedures plain text source code any more unless they know the encryption key.

pg_dump will not expose store procedures plain text source code too and the pg_dump output is directly restorable. Pre-wrapped blobs are accepted at CREATE time.

It is identical to `LANGUAGE plpgsql`, only the language name differs: `plpgsql_wrap`.

Example of use:

CREATE OR REPLACE FUNCTION public.calculate_bonus(emp_id int, yr int)
RETURNS numeric
LANGUAGE plpgsql_wrap
AS $$
DECLARE
v_salary numeric;
BEGIN
SELECT salary INTO v_salary FROM employees WHERE id = emp_id;
RETURN v_salary * 0.15; -- confidential formula
END;
$$;

-- Calling, permissions, overloading, results - all identical to plpgsql:
SELECT calculate_bonus(42, 2024);

In catalog table `pg_proc` the code is obfuscated:

SELECT substring(prosrc, 1, 50)||'...' AS wrapped_code
FROM pg_proc WHERE proname = 'calculate_bonus';
wrapped_code
-------------------------------------------------------
PLPGSQLWRAP:1:5752415001f5db365c6c185b66081ff0a23d...
(1 line)

This is also what will appears in the pg_dump output.

The `plpgsql_wrap.unwrap_procedure()` function is provided to recover the plain text source code using the encryption key. See detailed information by reading the [documentation](https://github.com/hexacluster/plpgsql_wrap/)

## Links & Credits

plpgsql_wrap is an open project. Any contribution to build a better tool is
welcome. You just have to send your ideas, features requests or patches
using the GitHub tools.

**Links :**

* Documentation: [https://github.com/hexacluster/plpgsql_wrap/](https://github.com/hexacluster/plpgsql_wrap/)
* Download: [https://github.com/hexacluster/plpgsql_wrap/releases/](https://github.com/hexacluster/plpgsql_wrap/releases/)
* Community support: use GitHub report tool at [https://github.com/hexacluster/plpgsql_wrap/issues](https://github.com/hexacluster/plpgsql_wrap/issues)
* Commercial support: [contact Hexacluster](https://hexacluster.ai/contact-us)

## About plpgsql_wrap

The objective of this extension it to provide a feature to obfuscate plpgsql source code. It is primarily used to protect intellectual property or sensitive business logic when delivering code.

This is a project created and maintained by Gilles Darold at [HexaCluster Corp](https://hexacluster.ai).