What the programme covers
Applied across relational databases, big data platforms and unstructured data stores alike.
Discovery and inventory
Data stores across the estate catalogued with their objects, accounts and security configuration, including the ones nobody documented.
Vulnerability assessment
Databases scanned for missing patches, insecure configuration and known weaknesses, on premises and in cloud.
Weak credential detection
Weak, default and shared credentials identified and prioritised, so high risk accounts are dealt with before they are used.
User rights review
Users, roles, objects and privileges analysed to expose excessive access and move the estate towards least privilege.
Activity monitoring
Database activity watched for unusual or suspicious behaviour, with alerts routed to whoever is on shift.
Policy violation alerting
Violations of your policy raised as actionable alerts rather than buried in a log nobody reads.
Privileged user auditing
Forensic trails of privileged activity retained, which is what most compliance regimes actually ask for.
Compliance mapping
Findings mapped to the regimes you answer to, including payment, privacy and sector specific requirements.
Exception handling
Weaknesses that cannot be remediated immediately are recorded as accepted exceptions with an owner and a date.
Find it, assess it, reduce the privilege, then watch it
Assessment without monitoring is a snapshot. Monitoring without assessment alerts on a database that was misconfigured from day one.
Assessment engagement
A defined assessment across an agreed set of databases, with findings, prioritised remediation and a retest.
Continuous protection
Ongoing assessment and activity monitoring operated by us, with alerts triaged and reports delivered on a schedule.
Controls that work alongside it
Data classification
Knowing which data matters is what makes prioritisation possible.
Data leakage prevention
Controls on data leaving the estate, once you know where it lives.
Privileged access management
Control over the accounts that hold the keys to those data stores.