Inside the database service review

Databases hold the data attackers most want, so MySQL and other database services are a key part of the audit.

We examine areas such as:

• Whether the database is exposed to the network when it should only be reachable locally.
• Authentication, account privileges and whether any accounts are over-powered or left on defaults.
• Configuration weaknesses and hardening gaps.
• Whether the software is current and patched.

A database that listens to the whole internet, or that grants broad privileges to accounts that do not need them, is a direct path to your most sensitive information. The audit reports how your database services are exposed and what needs locking down.