Pete Finnigan's Oracle Security Weblog

We have demonstrated our database security vulnerability scanner product to a lot of our customers and partners customers over the last few months and the reactions and feedback have been amazing. The product has two major modes, which map to the licening models; this is the "auditor mode" and the "enterprise mode". Both use the same basic product engines but differ really at the licensing level.

PFCLScan Auditor: The auditor version of PFCLScan is an ideal tool for auditors - targetted at auditing a small number of databases in a deep and methodological way to get the clearest deepest picture of your current security. Ideal for external auditors, internal auditors and DBA's and anyone who wants to start their work on securing their database. A deep clear picture is needed. PFCLScan is the tool to do this.

PFCLScan Enterprise: PFCLScan is ideal too for end customers to scan many databases with your own custom developed policies or ours to undeerstand which databases must be secured. It also provides a roles as a monitoring or compliance tool. PFCLScan is scalable and can be run remotely or completely from the command line. All of the key scanning functionallity is seperated architecturaly from the console to allow this. This means that 1 + n child engines can be deployed locally or remotely and controlled from the central console. The console also provides centralised customisable reporting.

PFCLScan sports a lot of unique features not available in other database scanning tools.

We have decided to have a first public demonstration of PFCLScan in Edinburgh on Thursday May 13th between 12:30pm and 13:30pm. The demonstration will be held at Bright Purples Office in the center of Edinburgh. The places are limited and are available on a first come first served basis. You can book a place by sending myself an email - my email address is on our contact page.