LevelBlue AppDetectivePRO vs SQLTriage

LevelBlue AppDetectivePRO scans databases and big data stores for configuration errors, access-control issues, missing patches, and risky settings that could lead to compromise. It assesses databases on premises or in the cloud and supports discovery, assessment, and reporting on security, risk, or compliance posture. LevelBlue says the product has more than 50 built-in policies and 12 annual knowledge-base updates. SpiderLabs experts contribute vulnerability research to that knowledge base, and policies can be customized. Supported datastore examples include Amazon RDS, Azure SQL, Microsoft SQL Server, MySQL, PostgreSQL, MongoDB, Cassandra, Couchbase, Elasticsearch, and Teradata. Licensing depends on the number and type of databases, with a licensed unit defined for each platform; pricing is available on request. A 30-day trial is offered. The trial license excludes some filtering or customization features, and technical support is unavailable during the trial. An evaluation without an evaluation license is limited to one scanned asset and one built-in policy, then stops running 30 days after first opening.

SQLTriage audits SQL Server and maps findings to compliance controls, with cited evidence and a PDF for board-level review. It describes more than 576 checks across security, performance, configuration, high availability, backup, and recovery. Mappings cover NIST 800-53, CIS Benchmarks, DISA STIG, ISO 27001, SOC 2, PCI-DSS, and HIPAA. Its read-only assessment queries SQL Server DMVs without installing an agent or changing the schema; separate opt-in deployment and remediation pages can make changes. Companion monitoring views include live sessions, blocking chains, query plans, wait statistics, dashboards, and alerts. The repository says the app is local-only by default, without telemetry, phone-home behavior, or a cloud dependency, and supports optional Azure Blob export. SQL passwords are encrypted at rest with AES-256-GCM and DPAPI. It supports Windows authentication, SQL authentication, and Azure AD. Azure SQL Managed Instance is fully supported; Azure SQL Database has partial support, and checks needing server-level DMV access are skipped automatically. SQLTriage is free under GNU GPL v3, allowing commercial use while requiring modifications to remain open.