PostGIS is a PostgreSQL extension that adds geographic objects and spatial query functions. It lets applications store maps, coordinates, polygons, routes, and other location data, then search and analyze them with SQL. In practice, PostGIS turns a standard relational database into a geospatial engine for web maps, logistics platforms, and location-aware services.
From a security perspective, PostGIS matters because it often sits directly behind public-facing filters and search features. If an application translates user input into SQL unsafely, attackers may abuse the database layer to read data, modify records, or widen an injection flaw. Defenders reduce this risk with parameterized queries, strict input handling, least-privilege database roles, and careful review of any code that rewrites geospatial filters into SQL.