Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "AI and Oracle Security"]

Update on Oracle Security

PFCLScan 2025

Just an update as I have not posted too many blogs recently. I have a bag log of blog ideas to write on technical subjects directly relating to Oracle security so please watch out for those by subscribing / following / connecting on all out social channels to see the latest posts and also

  • LinkedIn: Please note I have reached the maximum of 30,000 connections BUT you can still follow me or our company page

  • FaceBook Personal Profile: Please send me a friend request and also have a look for our Facebook pages and follow them

  • Twitter / X: Please follow me

  • Youtube: This is out youtube channel, please subscribe

  • Instagram: This is our instagram channel, please follow

  • Threads: Please follow me on threads

  • BlueSky: Please follow us on BlueSky and like and share posts



We also have some pages on Facebook and Linkedin and you can find those from my profiles; we post on most channels so please give us a like and subscribe.

I have just completed the second teaching of our 3 day in person securing data in the Oracle database. We held the most recent class last week here in York, UK. The class is cradle to grave on how and why to secure data in an Oracle database. Each student got hundreds of free SQL and PL/SQL tools and scripts as well as over 840 content slides and also free 30 days licenses for PFCLScan and PFCLForensics.

We are running the class again soon again in York, must likely in May. If you are interested please let me know and book your place. The details of the class are here - NOTE: the dates are for the last teaching last week but the class and details are the same.

I am also planning a 2 day class on secure coding in PL/SQL to be held also here in York. Watch for the details of this class; each student will also get a free 30 day license for PFCLCode and PFCLObfuscate both of which will be covered in the class as they relate to secure PL/SQL. No details written down yet as a web page but coming soon but the class is written. This class will most likely be around the end of May or early June. Please let me know if you would like to book a place.

We completed version 2024 of our database scanner PFCLScan at the end of last year and all of our other products are "apps" based on the PFCLScan framework and each also had numerous updates. We did over 4000 changes to the whole package for version 2024 including more than 700 new security checks in PFCLScan and more than 300 new checks in PFCLCode.

As you can see above with the picture at the start of this post we have started on version 2025 of our product stack. There are lots of new features and updates planned and this new version will be released later this year. Watch out for more details here and our socials as we add them. We plan much more blogs to highlight the new features, checks, reports that will be added to all our products.

We have been delivering for some time PFCLATK our audit trail toolkit as a package of consulting / design work and a pre-configured audit trail toolkit. This has helped customers set up and get decent audit trails of the Oracle database engine quickly. We have done major updates of this toolkit over the last few months and it supports unified audit and we are also planning a simple "app" to add it to our PFCLScan framework. More on this soon....

We are also developing another "app" called currently PFCLUTK that allows a detailed view of all users and their rights in the database with the emphasis of what should / could be kept and what should / could be removed to allow designs of the database and applications to tend towards Least Privilege. I will show a demo of this tool here very soon and show some of its features

I am going to be at Oracle Open World London tomorrow, so if you are there are you see me, please say hello!!

I also received an from Anuj Agarwal who said my site/blog is in the top 100 Oracle blogs. Of course Tim is number 2, Jeff number 3 and I am number 10. Please give me more likes, shares, connections, follows and I can improve my position

#oracleace #sym_42 #ukoug #ocw #cloudworld #oracle #security #training #products #databreach #securedata #gdpr