DBSec Database Security Assessment System vs LevelBlue AppDetectivePRO

DBSec Database Security Assessment System, identified as DSAS, supports data-security governance by combining asset discovery, risk assessment, sensitive-data analysis, and usage management. Network sniffing finds databases across corporate, branch, and wide-area networks and builds an asset list. Scans check DBMS vulnerabilities, weak policies, default settings, risky code, excessive privileges, and weak passwords. DSAS evaluates asset value, vulnerabilities, and threats, then produces risk reports and remediation advice. It maps sensitive-data distribution and volume, manages models describing sensitive characteristics, and records related business systems and departments. Change monitoring follows sensitive-data growth, high-risk account changes, unknown access sources, data flows, and access behavior. Listed database support includes Oracle, SQL Server, MySQL, PostgreSQL, Informix, DM, KingBase, Gbase, Teradata, and Hive. Beijing DBSEC Technology Co., Ltd., founded in 2009, lists pricing on request.

LevelBlue AppDetectivePRO scans databases and big data stores for configuration errors, access-control issues, missing patches, and risky settings that could lead to compromise. It assesses databases on premises or in the cloud and supports discovery, assessment, and reporting on security, risk, or compliance posture. LevelBlue says the product has more than 50 built-in policies and 12 annual knowledge-base updates. SpiderLabs experts contribute vulnerability research to that knowledge base, and policies can be customized. Supported datastore examples include Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata. Licensing depends on the number and type of databases, with a licensed unit defined for each platform; pricing is available on request. A 30-day trial is offered. The trial license excludes some filtering or customization features, and technical support is unavailable during the trial. An evaluation without an evaluation license is limited to one scanned asset and one built-in policy, then stops running 30 days after first opening.