Overview
Identify threats and security gaps in environments
IBM® Guardium® Vulnerability Assessment software scans on-premises and cloud database infrastructure to detect vulnerabilities and orchestrate remedial actions. It is part of the IBM Guardium family of data security software.
Identifying vulnerabilities in your data environments is key to understanding and managing your data security posture. IBM Guardium Vulnerability Assessment scans data infrastructure such as databases, data warehouses, and big data environments — both on-premises and in the cloud — to detect vulnerabilities and suggest remedial actions based on benchmarks from STIG, CIS, CVE, and other configuration standards.
Guardium Vulnerability Assessment identifies security gaps in databases such as missing patches, weak passwords, unauthorized changes, misconfigured privileges, excessive administrative logins, unusual after-hours activity, and other behavioral vulnerabilities such as account sharing. It then provides full reports as well as actionable recommendations to address vulnerabilities to harden your database environments.
Guardium Vulnerability Assessment is delivered as a part of Guardium Data Protection, but can be implemented as a stand-alone offering that serves its own use case.
In the spotlight
Features
Power up with enterprise AI assurance at scale
- Best practice recommendations
- Data Security Posture Management
- Custom dashboard reports
- Built-in compliance workflow
Provide a summary security evaluation, which includes weighted metrics and recommended remedial action plans to strengthen security. Automatically schedule assessments and manage report distribution, sign-offs, and escalations. Integrate the solution with other vulnerability management tools through APIs and/or a CSV upload for further correlations of vulnerabilities and risk. Use this to support regulations such as Sarbanes-Oxley, Payment Card Industry (PCI) and the Health Insurance Portability and Accountability Act (HIPAA).
Scan data infrastructure for vulnerabilities to identify security risks, such as missing patches, weak passwords, incorrectly configured privileges and default vendor accounts. Evaluate and document your database security to help assess, escalate, and remediate risks. Plan scanning to understand zero-day threat exposures and remediate threats. ServiceNow integration allows for seamless orchestration and remediation.
Scan your entire database infrastructure for vulnerabilities to identify security risks and schedule platform-specific tests that detect insecure configurations for the specific database being assessed, along with drill-down capabilities. IBM Guardium Vulnerability Assessment is designed to provide detailed reports for more than 2,000 pre-defined and custom exposure tests. Monitor summary counts for each major test category: Center for Internet Security (CIS), Database Security Technical Implementation Guide (STIG) and Common Vulnerability Event (CVE).
Provide a summary security evaluation, which includes weighted metrics and recommended remedial action plans to strengthen security. Automatically schedule assessments and manage report distribution, sign-offs, and escalations. Integrate the solution with other vulnerability management tools through APIs and/or a CSV upload for further correlations of vulnerabilities and risk. Use this to support regulations such as Sarbanes-Oxley, Payment Card Industry (PCI) and the Health Insurance Portability and Accountability Act (HIPAA).
Use cases
Use cases
Resources
Delve deeper