Databases remain the primary target in most enterprise data breaches—yet many organizations still lack continuous, automated visibility into their database security posture. Thales Database Assessment Server (DAS) delivers a powerful database vulnerability scanner built to eliminate this blind spot. Integrated into the Thales Data Security Fabric, DAS provides policy‑driven assessments across all major database platforms, using both industry-standard and proprietary benchmarks. Security teams receive immediate or scheduled findings with clear, actionable remediation steps.
Comprehensive, Policy-Driven Database Vulnerability Assessment
DAS connects to your databases without downtime or schema changes, then automatically runs your selected scan policies. As a high‑precision database vulnerability scanner, it evaluates:
- Configuration hardening
- Patch status
- Encryption settings
- Audit logging
- User privileges
- Known Common Vulnerabilities and Exposures (CVEs)
Out‑of‑the‑box Benchmark Sources
DISA STIG
Prescriptive DoD-aligned security controls per database platform, supporting ATO evidence, FISMA compliance, and federal or defense‑sector requirements.
CIS Benchmarks
Level 1 and Level 2 controls for cloud and on-prem databases, aligned with NIST, PCI‑DSS, HIPAA, and GDPR frameworks.
Thales Security Benchmarks
Exclusive Thales-developed tests that extend beyond STIG and CIS, adding additional platforms and advanced hardening controls.
Customized Scans
Build and schedule tailored scan policies for your specific environment, regulatory scope, or risk appetite. Define custom controls, combine benchmark sources, and target specific database groups or business units.
Risk Scoring and Guided Remediation
Every scan finding is automatically scored using NIST CVSS standards, providing consistent, defensible severity ratings. Each failed test includes embedded remediation guidance—SQL commands, configuration changes, and references to the corresponding STIG or CIS control section—enabling teams to take action immediately without external documentation.
Key Capabilities
- 170+ pre-built scan policies / 7,800+ individual tests
- DISA STIG alignment mapped per database platform
- CIS Benchmark alignment with Level 1/2 controls for cloud and on-prem databases
- Exclusive Thales-developed policies beyond STIG & CIS
- Build and schedule custom scan policies and tests
- NIST CVSS-based risk scoring
- Guided remediation with SQL and configuration instructions
- Audit-ready compliance reporting with benchmark control mapping
- Sensitive data discovery and classification capabilities
- User rights assessment to detect dormant accounts and excessive privileges
Supported Database Platforms
DAS provides database vulnerability scanning coverage for 44 databases across on‑premises, cloud‑managed, big data, and NoSQL environments.
Platform | Supported Databases |
On-Premises | Oracle SQL Server MySQL MariaDB PostgreSQL IBM DB2 Informix SAP HANA Sybase Teradata HyperSQL Netezza Snowflake |
Apache | Apache Derby Apache Hadoop Apache Cassandra Apache HDFS Apache Hive Apache Impala Apache Druid Apache Ranger |
AWS | Aurora MySQL Aurora PostgreSQL RDS MySQL RDS PostgreSQL RDS SQL Server RDS Oracle RDS MariaDB Redshift |
Azure | Azure SQL Azure MySQL Azure PostgreSQL Azure MariaDB |
GCP | GCP MySQL GCP PostgreSQL GCP SQL Server |
NoSQL / NewSQL | Aerospike MongoDB CouchDB Couchbase Redis Neo4j CockroachDB YugabyteDB |
Enterprise Apps | Oracle EBS PeopleSoft Oracle SAP |
Regulatory Frameworks
- PCI-DSS
- HIPAA
- GDPR
- SOX
- FISMA
- NIST SP 800-53
- CCPA
Resources
| Image | Title | Link |
|---|---|---|
 | Product Brief: Database Assessment Server |