DBSec Database Security Assessment System vs Defensia Database Security

DBSec Database Security Assessment System, identified as DSAS, supports data-security governance by combining asset discovery, risk assessment, sensitive-data analysis, and usage management. Network sniffing finds databases across corporate, branch, and wide-area networks and builds an asset list. Scans check DBMS vulnerabilities, weak policies, default settings, risky code, excessive privileges, and weak passwords. DSAS evaluates asset value, vulnerabilities, and threats, then produces risk reports and remediation advice. It maps sensitive-data distribution and volume, manages models describing sensitive characteristics, and records related business systems and departments. Change monitoring follows sensitive-data growth, high-risk account changes, unknown access sources, data flows, and access behavior. Listed database support includes Oracle, SQL Server, MySQL, PostgreSQL, Informix, DM, KingBase, Gbase, Teradata, and Hive. Beijing DBSEC Technology Co., Ltd., founded in 2009, lists pricing on request.

Defensia Database Security detects database ports exposed to the network and monitors authentication failures that may indicate brute-force attacks. Its agent monitors authentication logs for MySQL/MariaDB, PostgreSQL and MongoDB, and checks Redis port exposure. At startup, it checks ports 3306, 5432, 27017 and 6379; a port bound to 0.0.0.0 creates a dashboard advisory. Repeated authentication failures can trigger IP blocking through iptables or nftables. The agent runs as a systemd service and detects MySQL, PostgreSQL and MongoDB log files automatically. It requires Linux kernel 4.x or newer, root or sudo access, and HTTPS access to the Defensia panel. Deployment options include Docker, Docker Swarm and Kubernetes, with a Helm chart for Kubernetes. The dashboard shows attack timelines, blocked IPs and port advisories. Free is free, with one server, 2,000 events/month, three days of log retention and monitor mode only. Pro is €9 a month, with unlimited servers and events and 90 days of retention.