DBSec Database Security Assessment System vs Omega DB Scanner Standalone

DBSec Database Security Assessment System, identified as DSAS, supports data-security governance by combining asset discovery, risk assessment, sensitive-data analysis, and usage management. Network sniffing finds databases across corporate, branch, and wide-area networks and builds an asset list. Scans check DBMS vulnerabilities, weak policies, default settings, risky code, excessive privileges, and weak passwords. DSAS evaluates asset value, vulnerabilities, and threats, then produces risk reports and remediation advice. It maps sensitive-data distribution and volume, manages models describing sensitive characteristics, and records related business systems and departments. Change monitoring follows sensitive-data growth, high-risk account changes, unknown access sources, data flows, and access behavior. Listed database support includes Oracle, SQL Server, MySQL, PostgreSQL, Informix, DM, KingBase, Gbase, Teradata, and Hive. Beijing DBSEC Technology Co., Ltd., founded in 2009, lists pricing on request.

Omega DB Scanner Standalone is a Windows tool for auditing Oracle database security and assessing vulnerabilities. Its more than 250 controls cover privileges, audit settings, authentication, user profiles, security-related system parameters, backup and availability, and general security. The scanner works without an agent and accesses the database in read-only mode. You can tailor settings to a target environment, make exceptions for individual controls, scan the whole database, rerun selected items, or run a single vulnerability scan. Results can be compared with a baseline, saved or loaded in XML, and exported to XLS. The tool integrates with Splunk SIEM. Its free standalone edition runs on your PC and can also operate from a USB drive. Listed support covers Oracle Database 10g R1/R2, 11g R1/R2, and 12c with traditional auditing only. The product is intended for organizations implementing information security standards, industry practices, and internal controls. A download is offered after completing a form.