Onam Database Security assesses managed and self-hosted databases against cloud posture rules and CIS benchmarks for database engines. It discovers database resources across AWS, Azure, GCP, OCI, IBM Cloud, Alibaba, and Kubernetes through read-only APIs. Listed services include RDS, Aurora, Azure SQL, Cloud SQL, DynamoDB, Redshift, and OCI DB Systems. Checks cover encryption, public access, backup retention, deletion protection, audit settings, exposed snapshots, and privileged grants. Findings combine data classification with identity context to highlight sensitive databases and the principals able to access them. Cloud checks use control-plane APIs; optional CIS engine checks require a customer-provisioned read-only database account. Onam maps findings to 78 frameworks and offers PDF and CSV auditor exports with linked evidence. Free and Pro are SaaS plans; Enterprise also offers on-premises deployment. Free includes one cloud account and up to 500 resources. Pro is 22.00 USD per month, billed per resource, with a platform fee plus $22 per resource.
Who it is for
It suits teams that need to assess database posture across cloud providers and self-hosted environments. Its framework mappings, linked auditor exports, and identity context may help security and compliance teams review database risk.
What is good
- Read-only APIs discover resources across seven named providers and Kubernetes.
- Checks include encryption, backups, audit settings, and privileged grants.
- Findings combine data classification and identity context.
- Maps findings to 78 frameworks with linked auditor evidence.
- Free plan includes CIS coverage and up to 500 resources.
What to know first
- Free plan is limited to one cloud account and 500 resources.
- Pro pricing includes a platform fee plus $22 per resource monthly.
- Engine-level CIS checks require a customer-provisioned read-only account.
- Free plan has a 30-day finding history.
Verdict
Onam brings cloud posture checks, engine benchmarks, and access context into database security reviews. The Free plan is limited in account count, resource volume, and finding history, while Pro pricing is per resource.
Onam Database Security plans and pricing
All plansCompared on database vulnerability scanners
- Free plan
- Yes
- Paid from
- $22/mo
- Database platforms
- 8 platforms
- Deployment
- hybrid
- Cloud databases
- Yes
- Privilege analysis
- Yes
- Compliance templates
- Yes
- Agentless scanning
- Yes
- Remediation guidance
- Yes
