Onam Database Security vs SQLTriage
Onam Database Security
onamsecurity.comSQLTriage
github.comSide by side
| Figure | Onam Database Security | SQLTriage |
|---|---|---|
| Price from | $22/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Database Vulnerability Scanners | 7.9 (#7) | 7.3 (#13) |
| Checks | Checks include encryption, public accessibility, backup retention, deletion protection, audit configuration, snapshot exposure, and privileged database grants. | The site describes 576+ checks covering security, performance, configuration, and high availability, backup, and recovery. |
| Integrations | The pricing page lists email and Slack notifications and REST API access for Pro; Enterprise adds webhooks, SIEM, and a Terraform provider. | The site says users can connect with Windows Auth, SQL Auth, or Azure AD, and that SQLWATCH is useful for long-term historical dashboards. |
| Support | The pricing page lists community support for Free, email support with a response time under 24 hours for Pro, and priority support under four hours plus a CSM for Enterprise. | The repository directs bug reports and feature requests to GitHub Issues and community questions to GitHub Discussions. |
Plans
Onam Database Security
- FreeFree
- Pro$22 a month
- EnterprisePriced on request
In their own words
Onam Database Security
Onam Database Security evaluates managed and self-hosted databases against cloud posture rules and CIS engine-level benchmarks. It discovers resources across AWS, Azure, GCP, OCI, IBM Cloud, Alibaba, and Kubernetes through read-only APIs. Listed database services include RDS, Aurora, Azure SQL, Cloud SQL, DynamoDB, Redshift, and OCI DB Systems. Checks cover encryption, public accessibility, backup retention, deletion protection, audit configuration, snapshot exposure, and privileged database grants. Findings combine data-classification and identity context to identify sensitive databases and show which principals can access them. Cloud posture checks use cloud control-plane APIs; optional engine-level evaluation uses a read-only database account provisioned by the customer. Onam maps findings to 78 frameworks and offers PDF and CSV auditor exports with linked evidence. Free and Pro are SaaS plans; Enterprise also offers on-premises deployment. Free is limited to one cloud account and up to 500 resources. Pro is $22 a month, billed per resource per month, with a platform fee plus $22 per resource. A 14-day trial is listed.
SQLTriage
SQLTriage audits SQL Server and maps findings to compliance controls, with cited evidence and a PDF for board-level review. It describes more than 576 checks across security, performance, configuration, high availability, backup, and recovery. Mappings cover NIST 800-53, CIS Benchmarks, DISA STIG, ISO 27001, SOC 2, PCI-DSS, and HIPAA. Its read-only assessment queries SQL Server DMVs without installing an agent or changing the schema; separate opt-in deployment and remediation pages can make changes. Companion monitoring views include live sessions, blocking chains, query plans, wait statistics, dashboards, and alerts. The repository says the app is local-only by default, without telemetry, phone-home behavior, or a cloud dependency, and supports optional Azure Blob export. SQL passwords are encrypted at rest with AES-256-GCM and DPAPI. It supports Windows authentication, SQL authentication, and Azure AD. Azure SQL Managed Instance is fully supported; Azure SQL Database has partial support, and checks needing server-level DMV access are skipped automatically. SQLTriage is free under GNU GPL v3, allowing commercial use while requiring modifications to remain open.