Re: Database Scanners

[Joey Peloquin <joeyp () cotse net>]

Frank Boldewin wrote:

> hi,
> the only good database scanner i know is appdetective.
> http://www.appsecinc.com/products/appdetective/
> scans several databases: oracle, db2, mssql, mysql, notes, sybase and web
> apps.
> hope that helps.
>
> cheers,
> frank

I'll second the AppDetective recommendation.  We bought AppDetective for Web 
Apps, too.  Great tools for getting audit-level assessment done.  Their 
tools combined satisfy, IIRC, eight, or so, of the ~12 Visa CISP requirements.

cheers,
joey