• Protects your database from abnormal activity, SQL injections, privilege escalation attempts, buffer overflow, use of blacklisted or partially blacklisted apps and attempts to tamper with Hedgehog components (self-protection).
• Prevents breaches with pre-defined 'kill session' rules.
• Safeguards data from the insider threat. Did you know 2/3 organizations report losses caused by internal breaches (source: FBI/CSI 2006 survey).
• Flexible reporting facilitates regulatory compliance and forensics for PCI DSS, Sarbanes Oxley, HIPAA and privacy notification laws such as CA SB 1386.
• Real-time monitoring and alerting with sorting and filtering by severity level, time, rule triggers and more.
• Virtual patching of predefined rules that address known and newly discovered vulnerabilities, updates in real-time (first year free).
• Granular user-defined rules, inspecting activity based on SQL statements, database objects being accessed, IP address, user, date & time ranges, application used to access the database, and more.
• Ability to send e-mail alerts, and integrate with 3rd party network and security management systems via Syslog or SNMP.
• Host-based software runs on shared DB memory and uses < 5% of CPU. You will experience no performance degradation.
• Strong self-security through separation of duties. Tampering with Hedgehog requires cooperation of sys-admin, security and DBA.
• Scalable and able to centrally configure and monitor hundreds of databases. Supports clustering (e.g. Oracle RAC) and virtual environments.

• White Paper: Database Security [PDF]
• Blog: Is Your Database More Than 7% Secure? October 17, 2007
• Blog Post: Database Security – Just How Safe is Your Personal Information? August 27, 2007

• Do you store sensitive commercial and customer data in databases?
• Do you need to comply with regulatory requirements such as Sarbanes Oxley or PCI DSS?
• Do you undergo periodical internal or external audits of financial data?
• Do privileged users in your organization have uncontrolled access to databases?
• Do you have important intellectual property stored in databases?
• Are you concerned about database vulnerabilities and exploits, such as SQL injections?
• Do you sometimes neglect to upgrade your database with the latest security patches?
• Have you ever suffered a database breach?

Do you need the Hedgehog Enterprise or Hedgehog Standard?

• Feature Comparison
• Pricing
• Supported Configurations
• Sensor:
  DBMS: Oracle 8.1.7 or newer, Microsoft SQL Server 2005
  OS: Microsoft Windows 2000 or newer, Sun Solaris 7 or newer, IBM AIX 5.2 or newer, HP-UX 11.23 or newer, RHEL, SUSE (other Linux supported but requires manual install)
  
• Server:
  JRE 1.6 - provided with installation if not pre-installed
  OS: Windows, Linux (any), Unix (any)
• Download Now (You will be redirected to the Sentrigo website)

Send us your question and we will be happy to reply: