Skip to content
SPECIFICTION
Get listed

Oracle E-Business Suite Security Audit

phalanxcyber.ai

Self-hosted
Visit phalanxcyber.ai
Spec score 6.9 #15 of 27 in Database Vulnerability Scanners

Spec sheet

Purpose
The scanner audits Oracle E-Business Suite R12.x security using live database access or offline CSV exports.Read 7 Oct 2026 · phalanxcyber.ai
Intended users
The product page says the tool is built for SOX auditors, IT risk teams, and EBS administrators.Read 7 Oct 2026 · phalanxcyber.ai
Support
The founder page invites visitors to email Krishnendu De and says he will try to respond.Read 7 Oct 2026 · phalanxcyber.ai
License
The listed project license is MIT.Read 7 Oct 2026 · phalanxcyber.ai
Headquarters
Kolkata, IndiaRead 28 Sep 2026 · phalanxcyber.ai
Maker
PhalanxCyber describes itself as an open-source, not-for-profit cybersecurity community initiative; its founder bio identifies Krishnendu De and lists Kolkata, India.Read 7 Oct 2026 · phalanxcyber.ai
Check coverage
The product page gives conflicting counts: its summary says 68 checks across 10 categories, while the detailed overview says 140 checks across 13 domains.Read 7 Oct 2026 · phalanxcyber.ai
Compliance mapping
The page says findings map to SOX, CIS Oracle Database Benchmark, NIST 800-53, PCI-DSS v4.0, HIPAA, ISO 27001, and DISA STIG.Read 7 Oct 2026 · phalanxcyber.ai
Data export
A SQL export script produces about 45 CSV files for offline analysis; JSON output is described as suitable for SIEM/GRC ingestion.Read 7 Oct 2026 · phalanxcyber.ai
Data export integration
A SQL export script produces about 45 CSV files for offline analysis, and JSON reports are described as suitable for SIEM/GRC ingestion.Read 7 Oct 2026 · phalanxcyber.ai
Database permissions
The product page says the live scanner requires only SELECT access and can connect as APPS or a custom audit schema.Read 7 Oct 2026 · phalanxcyber.ai
Live mode
The live scanner connects to an Oracle database through the oracledb driver and uses read-only SELECT queries.Read 7 Oct 2026 · phalanxcyber.ai
Offline mode
The offline scanner analyzes CSV exports using Python’s standard library with no additional dependencies.Read 7 Oct 2026 · phalanxcyber.ai
Pipeline integration
The scanner returns exit code 1 for CRITICAL or HIGH findings and supports severity thresholds for CI/CD gating.Read 7 Oct 2026 · phalanxcyber.ai
Reports
It produces console, JSON, and self-contained HTML reports, with filtering and search in the HTML report.Read 7 Oct 2026 · phalanxcyber.ai
Reports and integrations
It produces console, JSON, and self-contained HTML reports, and supports CI/CD gating through severity-based exit codes.Read 7 Oct 2026 · phalanxcyber.ai
Run modes
The live scanner connects to an EBS database using the oracledb driver; the offline scanner analyzes CSV exports using only the Python standard library.Read 7 Oct 2026 · phalanxcyber.ai
Scan coverage
The page describes 140 checks across 13 domains, including user access, passwords, segregation of duties, database hardening, patching, privacy, and custom code.Read 7 Oct 2026 · phalanxcyber.ai
Security coverage
Checks cover user access, passwords, responsibilities, segregation of duties, concurrent programs, audit trail, database hardening, patching, workflow, privacy, and custom PL/SQL.Read 7 Oct 2026 · phalanxcyber.ai
Segregation of duties
The scanner detects 20 segregation-of-duties conflict pairs across financial and administrative responsibilities.Read 7 Oct 2026 · phalanxcyber.ai
SoD checks
It checks 20 segregation-of-duties conflict pairs across financial and other business modules.Read 7 Oct 2026 · phalanxcyber.ai
Version and count discrepancy
The page header lists 68 checks across 10 domains, while its overview and capabilities sections list 140 checks across 13 domains.Read 7 Oct 2026 · phalanxcyber.ai

Where Specifiction places it

Alternatives to Oracle E-Business Suite Security AuditAll alternatives →