 |
Effective Rights Analysis
– analysis of users’ effective rights shows you how
and where each right is granted, making it easy to
pinpoint exactly what changes need to be made in
order to close security holes.
|
 |
Database Roles Permissions
– view sub-roles, role members, assigned and
effective permissions. |
 |
SQL Server Files, Directories, and
Registry Settings –
browse and analyze all files, directories and
registry settings associated with SQL Server and
determine ownership as well as explicit and
inherited security rights. |
 |
Services
– Show details of services such as logon and
configuration. |
 |
SQL Server Surface Area and Protocols
– disables unused components to reduce exploit
risks. |
 |
OS Security Analysis
– assess the OS setup to identify issues that would
compromise SQL Server security.
|
 |
Powerful User Analysis
– analyze membership to powerful server roles and
groups such as administrators, system administrators
and security administrators so you can ensure this
level of access is warranted.
|
 |
Security Scorecard
– lists potential security concerns on your SQL
Servers such as cross database chaining and gives
you the ability to drill down to view the full
details. |
 |
Detection of Unresolved Windows
accounts – SQLsecure
shows you all logins on the target server, as well
as any unresolved Windows accounts or groups.
|
 |
Server Security Properties
– show all security related properties for servers
including: version and patch level, authentication
mode, audit mode, proxy account, and cross database
chaining. |
 |
Comprehensive Security Model Version
History and Baselining
– the SQLsecure Repository keeps a complete history
of SQL Server security settings, providing the
ability to designate a baseline to compare against
future snapshots to detect changes. This also
provides a valuable audit trail for forensic
analysis. |
 |
Powerful Reporting
– use built-in standard reports for security
auditing and compliance; plus, produce custom
reports or perform custom analysis via the data
stored on the SQLsecure repository. Data can also be
exported to Excel. |
 |
Cross-server Reporting
– provides the ability to show security state from a
global view (e.g. all instances with guest accounts
enabled). |