Defensia Database Security vs Qualys Policy Compliance

Defensia Database Security detects database ports exposed to the network and monitors authentication failures that may indicate brute-force attacks. Its agent monitors authentication logs for MySQL/MariaDB, PostgreSQL and MongoDB, and checks Redis port exposure. At startup, it checks ports 3306, 5432, 27017 and 6379; a port bound to 0.0.0.0 creates a dashboard advisory. Repeated authentication failures can trigger IP blocking through iptables or nftables. The agent runs as a systemd service and detects MySQL, PostgreSQL and MongoDB log files automatically. It requires Linux kernel 4.x or newer, root or sudo access, and HTTPS access to the Defensia panel. Deployment options include Docker, Docker Swarm and Kubernetes, with a Helm chart for Kubernetes. The dashboard shows attack timelines, blocked IPs and port advisories. Free is free, with one server, 2,000 events/month, three days of log retention and monitor mode only. Pro is €9 a month, with unlimited servers and events and 90 days of retention.

Qualys Policy Compliance has no write-up on Specifiction yet; its figures are above.