Omega DB Scanner Professional

Overview

Omega DB Scanner Professional is a security auditing tool and vulnerability assessment scanner for Oracle databases. It helps the user in performing the complex task of assessment, evaluation and improvement of the security posture of his mission critical Oracle database.

Omega DB Scanner Professional allows you to scan your Oracle database security posture on important security areas like: Authorization of Privileges (System, Role and Object Privileges), Audit settings, Authentication, User Profiles, System Parameters – security related, Backup and Availability, General Security and more.

Omega DB Scanner Professional provides a high level of customization in regard of the target database environment and allows the user to define tailored exceptions (acceptances) on each control.

Omega DB Scanner Professional can be virtually used by any organization that uses an Oracle database and it is looking to implement database information security compliance standards, best industry practices and strong internal security controls.

Introducing Omega DB Scanner Professional Edition

Omega DB Scanner is an out-of-box, software-only solution. The Professional Edition features a Repository (built on Oracle Express Edition) that contains system configurations and scan results, with a Task Scheduler as a NT Service application, and a Windows desktop application that manages the whole solution.

Target databases are scanned from both the application and Scheduler and results are saved to Repository. Automatic e-mail alerting for scan results can be configured for each database. Manual and transactional scan item’s comparison highlights any item change through DB scans.

Omega DB Scanner is not just a scanner, but also an inventory of your Oracle database’s security posture. It is Agent-less and accesses the target database in read-only mode.

Authorization

Authorization is the process of allowing acceptances to the vulnerability control’s finding either at a whole or at entity level, depending on each vulnerability control. This means that the control will not fire a Finding for an already declared holder, or holders, of the (for example) DBA Role authorized according to system’s Database Administrator[s] – at least one DBA has to be. But it must fire a Finding whenever a non-authorized account is found granted with the DBA role.

Scans Comparison

Use the scan comparison feature to highlight changes between two different scans, changes that are evaluated at each control between current run and the baseline. Automatic (transactional) comparison is also performed at the repository level for each vulnerability vs the previous scan result of the same.

Scheduled Scans

The solution’s Scheduler features scheduled scanning of target databases.

E-Mail Alert

E-Mail alert for scans with summary of results and transactional comparison.