DBSec Database Security Assessment System

dbsec.cn

Spec score 6.7 #17 of 27 in Database Vulnerability Scanners

What it is

DBSec Database Security Assessment System, identified as DSAS, supports data-security governance by combining asset discovery, risk assessment, sensitive-data analysis, and usage management. Network sniffing finds databases across corporate, branch, and wide-area networks and builds an asset list. Scans check DBMS vulnerabilities, weak policies, default settings, risky code, excessive privileges, and weak passwords. DSAS evaluates asset value, vulnerabilities, and threats, then produces risk reports and remediation advice. It maps sensitive-data distribution and volume, manages models describing sensitive characteristics, and records related business systems and departments. Change monitoring follows sensitive-data growth, high-risk account changes, unknown access sources, data flows, and access behavior. Listed database support includes Oracle, SQL Server, MySQL, PostgreSQL, Informix, DM, KingBase, Gbase, Teradata, and Hive. Beijing DBSEC Technology Co., Ltd., founded in 2009, lists pricing on request.

Spec sheet

Purpose: DSAS assists with locating assets, understanding sensitive data use and data risks, and classifying data; it integrates data asset, risk, and usage management.Read 9 Oct 2026 · dbsec.cn
Support: DBSEC lists a support hotline at +86 4000 258 365 and offers free pre-sales consultation.Read 9 Oct 2026 · dbsec.cn
Headquarters: Beijing, ChinaRead 28 Sep 2026 · dbsec.cn
Founded: 2009Read 28 Sep 2026 · dbsec.cn
Company: Beijing DBSEC Technology Co., Ltd. says it was founded on 2 March 2009 and is headquartered in Beijing, China.Read 9 Oct 2026 · dbsec.cn
Asset discovery: Using network sniffing, DSAS discovers databases across networks, branch networks, and WAN, then creates an asset list and records basic asset information and sensitive levels.Read 9 Oct 2026 · dbsec.cn
Change monitoring: The system tracks changes such as sensitive data growth, high-risk account changes, and unknown access sources, and analyzes data flow, access sources, and behavior through a flow collector.Read 9 Oct 2026 · dbsec.cn
Database support: The page lists Oracle, SQL Server, MySQL, PostgreSQL, Informix, DM, KingBase, Gbase, Teradata, and Hive among supported databases or data environments.Read 9 Oct 2026 · dbsec.cn
Intended industries: DBSEC says its products and cases serve government, finance, social security, energy, military, telecom operator, education, and medical industries.Read 9 Oct 2026 · dbsec.cn
Product identity: The page identifies DBSec Database Security Assessment System as DSAS and describes it as the first step of data security governance.Read 9 Oct 2026 · dbsec.cn
Risk assessment: DSAS assesses asset value, vulnerabilities, and threats, produces a risk assessment report, and provides remediation advice.Read 9 Oct 2026 · dbsec.cn
Sensitive data: DSAS scans sensitive data distribution, analyzes it statistically, manages data models with sensitive characteristics, and records related business systems and departments.Read 9 Oct 2026 · dbsec.cn
Vulnerability checks: Its scans cover DBMS vulnerabilities, low-security policies, default configurations, high-risk code, excessive privileges, and weak passwords.Read 9 Oct 2026 · dbsec.cn
Vulnerability scanning: DSAS scans for DBMS vulnerabilities, weak security policies, default configurations, high-risk code, excessive privileges, and weak passwords.Read 4 Oct 2026 · dbsec.cn

Strong points and limits

Strong points

Discovers databases across networks and WANs
Checks vulnerabilities, policies, passwords, and privileges
Provides risk reports and remediation advice
Tracks sensitive-data changes and access behavior
Supports numerous listed database systems

Limits

Pricing is available only on request
Network-sniffing discovery may require broad network access
Listed support may not cover unlisted database systems

Who it suits

It suits government, education, medical, financial, and other organizations managing diverse database assets. Teams needing privilege analysis, sensitive-data mapping, and remediation guidance may find its scope relevant.

Verdict

DSAS combines discovery, vulnerability checks, sensitive-data analysis, and change monitoring in one database-security assessment system. Its listed database coverage and remediation guidance are useful for organizations seeking a structured assessment, subject to a pricing inquiry.