AppDetectivePro primarily looks for security holes inside of a number of
popular database servers. The user interface makes it easy to determine which
steps of the scan should be performed next. The application also includes a pen
test feature, which truly performs a vulnerability assessment of the database.
We did have some initial trouble figuring out the correct menu to configure the
network interface for the product to use. From there the program performs a
network discovery, which identifies SQL servers, Oracle servers and web servers.
This program is different in that it does not detect web application
vulnerabilities, but rather it looks for vulnerabilities in the back-end
database. The program also includes a fix script feature, which allows for
faster remediation of vulnerabilities. AppDetectivePro is part of a suite of
products, including DbProtect, which provides activity monitoring, patch
management and database encryption. These offerings work to protect the database
after the scan in real time.
The installation of AppDetectivePro also installed some necessary additional
components, including XML and a form of SQL database. The application can also
use Access for storing the results so an SQL install is not necessarily needed.
The program installation was straightforward and only needed "next" to be
clicked a few times.
Documentation is included electronically in the form of PDF files. The
documentation is easy to follow and the layout is logical and probably necessary
for most administrators. The documentation was indexed and searchable in the
documents that we looked at and this made for an easier time finding necessary
information.
Phone support is available and standard support of 9 a.m.-9 p.m. EST is
included in the list price of the product. More support is available for an
additional fee. Support is also available through the company’s website at
www.appsecinc.com and access to the portal is password protected. Email support
is also available and we found it very fast in responding.
The pricing for the AppDetectivePro offering was at the low end of the price
spectrum with pricing beginning at just $900. Since support and maintenance is
included, the price is easily justified.