Skip to content
SPECIFICTION
Get listed

LevelBlue AppDetectivePRO

levelblue.com

Free trial WebWindowsSelf-hosted
Visit levelblue.com
Spec score 8.3 #5 of 27 in Database Vulnerability Scanners

What it is

LevelBlue AppDetectivePRO scans databases and big data stores for configuration errors, access-control issues, missing patches, and risky settings that could lead to compromise. It assesses databases on premises or in the cloud and supports discovery, assessment, and reporting on security, risk, or compliance posture. LevelBlue says the product has more than 50 built-in policies and 12 annual knowledge-base updates. SpiderLabs experts contribute vulnerability research to that knowledge base, and policies can be customized. Supported datastore examples include Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata. Licensing depends on the number and type of databases, with a licensed unit defined for each platform; pricing is available on request. A 30-day trial is offered. The trial license excludes some filtering or customization features, and technical support is unavailable during the trial. An evaluation without an evaluation license is limited to one scanned asset and one built-in policy, then stops running 30 days after first opening.

Spec sheet

What it does
AppDetectivePRO scans databases and big-data stores for vulnerabilities, configuration errors, access-control problems, missing patches and risky combinations of settings.Read 15 Oct 2026 · levelblue.com
Purpose
AppDetectivePRO scans databases and big data stores for configuration mistakes, access control issues, missing patches, and risky settings that could lead to compromise.Read 30 Sep 2026 · levelblue.com
Deployment
The product assesses databases and big data stores on premises or in the cloud.Read 30 Sep 2026 · levelblue.com
Integrations
The product supports asset import and export, third-party credential-management integration such as CyberArk, and exports suitable for security dashboards.Read 15 Oct 2026 · levelblue.com
Support
The iTnews review reported phone support from 9 a.m. to 9 p.m. EST, password-protected web support and fast email responses, with extra support available for a fee.Read 15 Oct 2026 · itnews.com.au
Headquarters
Plano, Texas, United StatesRead 28 Sep 2026 · levelblue.com
Founded
2024Read 28 Sep 2026 · levelblue.com
API and SDK status
The Common Criteria document says the software uses documented platform APIs and lists bundled third-party libraries, but it does not present a public product API or SDK.Read 15 Oct 2026 · commoncriteriaportal.org
Audit scanning
Authenticated Audit policy scans inspect database configuration, integrity and security controls.Read 15 Oct 2026 · levelblue.com
Auto-remediation limitation
The scanner does not automatically alter databases or remediate findings.Read 15 Oct 2026 · levelblue.com
Backend database
Installations can use embedded Microsoft SQL Server 2012 Express or an existing SQL Server 2005, 2008 or 2012 instance.Read 15 Oct 2026 · levelblue.com
Cloud targets
The systems sheet lists VMware vSphere, Citrix XenServer, Microsoft Hyper-V, Oracle VM, Red Hat virtualization, Amazon EC2 and Rackspace CloudServers as supported environments for target stores.Read 15 Oct 2026 · levelblue.com
Company headquarters
LinkedIn lists Chicago, Illinois as Trustwave's headquarters and gives 70 W Madison St, Suite 600, Chicago, Illinois 60602 as the primary location.Read 15 Oct 2026 · linkedin.com
Company identity
LinkedIn identifies Trustwave, now a LevelBlue company, as a privately held computer and network security business.Read 15 Oct 2026 · linkedin.com
Company size
LinkedIn displays 633 employees for Trustwave, a LevelBlue company, and describes the company as founded in 1995.Read 15 Oct 2026 · linkedin.com
Compliance coverage
LevelBlue lists policy coverage for FedRAMP, Zero Trust, CMMC, HIPAA, PCI DSS, GDPR, CCPA, GLBA, Sarbanes-Oxley and other frameworks.Read 15 Oct 2026 · levelblue.com
Credential handling
Cached scan credentials are protected with Windows Data Protection API and removed when the application closes.Read 15 Oct 2026 · levelblue.com
Custom policies
Built-in policies include CIS, DISA STIG, GDPR and best-practice checks, and the Policy Editor can create or modify policies and checks.Read 15 Oct 2026 · levelblue.com
Database checks
A Trustwave datasheet states that the SpiderLabs knowledgebase contains more than 5,000 database-specific checks.Read 15 Oct 2026 · trustwave.com
Database discovery
The product discovers and inventories known and unknown databases, objects, users, roles and security configurations.Read 15 Oct 2026 · levelblue.com
Datastores
The official systems sheet lists Oracle, Microsoft SQL Server, IBM DB2 LUW and z/OS, Sybase ASE, MySQL and Hadoop as target data stores.Read 15 Oct 2026 · levelblue.com
Deployment model
LevelBlue describes scanning databases both on premises and in cloud environments, with a downloadable Windows client.Read 15 Oct 2026 · levelblue.com
Documentation
An independent iTnews review found the supplied PDF documentation indexed, searchable and generally easy to follow for administrators.Read 15 Oct 2026 · itnews.com.au
Knowledgebase
The product advertises more than 50 built-in policies and 12 annual knowledgebase updates on the current LevelBlue page.Read 15 Oct 2026 · levelblue.com
Legacy evaluation limits
The evaluation guide says an evaluation without an evaluation license is limited to one scanned asset and one built-in policy, and stops running 30 days after first opening.Read 30 Sep 2026 · levelblue.com
License basis
Licensing is based on the number and type of databases, with the licensed unit defined for each database platform.Read 30 Sep 2026 · support.levelblue.com
Limit: documentation
A G2 reviewer said the documentation was difficult to understand.Read 15 Oct 2026 · g2.com
Limit: integrations
Two G2 reviewers said integration with other applications was difficult or needed improvement.Read 15 Oct 2026 · g2.com
Limit: learning curve
The iTnews review said first use could be confusing and noted difficulty finding the network-interface configuration menu.Read 15 Oct 2026 · itnews.com.au
Limit: performance
One G2 reviewer reported that the product made the system slow and caused other applications to respond less quickly.Read 15 Oct 2026 · g2.com
Penetration testing
A non-credentialed Pen Test policy uses database fingerprinting to identify versions, patch levels and associated vulnerabilities without changing the database.Read 15 Oct 2026 · levelblue.com
Praise: interface
G2 reviewers repeatedly described the interface as easy to configure, smooth and usable after setup.Read 15 Oct 2026 · g2.com
Praise: scanning depth
A G2 reviewer described the product as effective for automating SQL database scans for errors and access-control problems.Read 15 Oct 2026 · g2.com
Praise: usability
The iTnews reviewer praised straightforward installation, a logical dashboard and broad support.Read 15 Oct 2026 · itnews.com.au
Privacy claim
The Common Criteria security target states that the evaluated application does not transmit personally identifiable information over a network.Read 15 Oct 2026 · commoncriteriaportal.org
Rating on G2
4.4 out of 5 from 5 reviewsRead 15 Oct 2026 · g2.com
Remediation guidance
Each knowledgebase check can provide remediation guidance and the product can generate a Fix Scripts report containing possible SQL statements.Read 15 Oct 2026 · levelblue.com
Reporting
Reports can be produced for executives and administrators, with results exportable to CSV and other formats.Read 15 Oct 2026 · trustwave.com
Risk checks
LevelBlue states that AppDetectivePRO offers more than 50 built-in policies and 12 annual knowledge base updates.Read 30 Sep 2026 · levelblue.com
Scans and reporting
Users can discover, assess, and report on database security, risk, or compliance posture.Read 30 Sep 2026 · levelblue.com
Security evaluation
AppDetectivePRO version 10.2 has a Common Criteria Security Target with an official release history beginning in April 2022.Read 15 Oct 2026 · commoncriteriaportal.org
Support lifecycle
LevelBlue's support article says supported versions are the latest release and the two previous releases; upgrades are available to customers with current support and maintenance contracts or subscriptions.Read 30 Sep 2026 · support.levelblue.com
Support resources
LevelBlue directs database security customers to its support portal for documentation and personal assistance.Read 30 Sep 2026 · support.levelblue.com
Supported datastore examples
The supported database list includes Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata.Read 30 Sep 2026 · levelblue.com
System requirements
The published requirements specify a 64-bit Windows host, dual-core 1.60 GHz processor, at least 3 GB RAM, 400 MB installation space and at least 5 GB for scan data.Read 15 Oct 2026 · levelblue.com
Trial duration
LevelBlue offers an AppDetectivePRO 30-day trial.Read 30 Sep 2026 · levelblue.com
Trial restrictions
The trial license excludes some filtering or customization features, and AppDetectivePRO technical support is unavailable during the trial.Read 30 Sep 2026 · levelblue.com
User-rights analysis
User Rights scans expose excessive, orphaned and nested privileges so teams can apply least-privilege controls.Read 15 Oct 2026 · levelblue.com

Plans and prices

AppDetectivePRO 30-Day Trial Free single-license trial · filtering and customization features excluded · no technical support during trial Read 15 Oct 2026 · levelblue.com
Complimentary single-license trial Free Single license · one extended evaluation license per company unless approved · excludes some filtering and customization features · no technical support during trial Read 30 Sep 2026 · levelblue.com
AppDetectivePro offering (iTnews review) Priced on request pricing beginning at $900 support and maintenance included in reviewed price Read 15 Oct 2026 · itnews.com.au

Every LevelBlue AppDetectivePRO plan and price →

Strong points and limits

Strong points

  • Scans on-premises and cloud database environments.
  • Includes more than 50 built-in policies.
  • Knowledge base receives 12 updates annually.
  • Supports a range of named database platforms.
  • A 30-day trial is available.

Limits

  • Pricing is available on request.
  • Trial excludes some filtering and customization features.
  • Technical support is unavailable during the trial.
  • Unlicensed evaluation is limited to one asset and policy.

Who it suits

AppDetectivePRO suits teams responsible for assessing database and big data security across on-premises and cloud environments. Its policy-based checks and reporting may fit organizations tracking database risk or compliance posture.

Verdict

AppDetectivePRO focuses on database and big data security assessment, with policies and support for varied datastore platforms. Confirm the database-based licensing scope and trial restrictions before evaluating it.

Where Specifiction places it

Alternatives to LevelBlue AppDetectivePROAll alternatives →