AppSentry for Oracle Application Server

Oracle Application Server

Integrigy Corporation

http://www.integrigy.com/appsentry9ias.htm

AppSentry for the Oracle Application Server detects security risks and vulnerabilities within the Oracle Application Server and associated application. With over 100 audits and checks specifically written for the Oracle Application Server, AppSentry automates and streamlines the identification of vulnerabilities to an extent not previously possible. AppSentry supports Oracle 9iAS and Oracle Application Server 10g.

COMMERCIAL

Information Updated:19 Jan 2004

Symantec Enterprise Security Manager Web Servers Module

IIS iPlanet Apache

Symantec

http://www.symantec.com/region/can/eng/product/esm/webservers/

ESM for Web Servers modules ease the administrative burden of measuring the effectiveness of enterprise security policies and enforcing compliance. With the modules, ESM's centralized security scanning and integrated reporting capabilities can be utilized to automate security evaluations and policy enforcement for a variety of IIS, iPlanet, and Apache Web servers running on several versions of the Windows, Solaris, and Linux operating systems.

COMMERCIAL

Information Updated:16 Nov 2004

DominoScan

Domino

Next Generation Security Software Ltd

http://www.nextgenss.com/products/internet-security/dominoscan.php

DominoScan is comprehensive - it puts each view and document found through a rigourous set of security tests. By using the technique discovered by NGSSoftware called "Database Structure Enumeration" DominoScan can find every view, hidden or visible, form and agent in a database - even those where ACLs protect against access. From there it is an easy task to enumerate every document in each view. Once this list has been compiled DominoScan performs many checks to see if the security of the Domino server or an online applications can be subverted. DominoScan is easy to use. A user of DominoScan would enter the name of the server to be assessed and once completed a detailed report is generated that guides the user through all the vulnerabilities discovered and how to address them thus greatly strengthening the security of the Domino web server.

COMMERCIAL

Information Updated:28 Mar 2003

OraScan

Oracle

Next Generation Security Software Ltd

http://www.nextgenss.com/products/internet-security/orascan.php

OraScan is part of NGSSoftware's intelligent Application Security Assessment Scanner suite of Next Generation security tools designed to completely automate the process of assessing an Oracle web front end and its online applications.

COMMERCIAL

Information Updated:28 Mar 2003

Typhoon II aka Cerberus Internet Scanner

Web Servers

Next Generation Security Software Ltd

http://www.nextgenss.com/products/internet-security/ngs-typhon.php

 Typhon II has over 320 unique checks and with the NT registry module, where before there were 40 checks there are now over 80. Typhon II will scan a given host or range of machines for known security holes and vulnerabilities. It does this by looking at the services offered by a host and each of these are examined for holes. Once a scan has been completed a report in HTML is produced detailing what security holes were found, the impact of those holes and how to fix them. Once these holes have been removed then the host will be more secure against attacks.

COMMERCIAL

Information Updated:28 Mar 2003