Application Security

SQL AuditNew

Connects to your Microsoft SQL Server instances to perform comprehensive security audits — reviewing user permissions, encryption status, auditing configuration, and CIS Benchmark compliance — so your databases are as hardened as the perimeter protecting them.

Get a Demo Login to App

SQL Audit

Database security auditing and CIS compliance

What it does

Key capabilities

Permission Auditing

Reviews every database login, user mapping, and role assignment to surface over-privileged accounts and unnecessary sysadmin rights.

Encryption Assessment

Verifies Transparent Data Encryption (TDE), backup encryption, and connection encryption status across all databases and instances.

Audit Configuration Review

Checks that SQL Server Audit is configured and capturing the event categories required by CIS Benchmark and compliance frameworks.

CIS Benchmark Scoring

Evaluates your SQL Server configuration against CIS Microsoft SQL Server Benchmark controls with a per-check pass/fail breakdown.

Risk Finding Highlights

Prioritises the highest-risk findings — public synonyms, orphaned users, linked server trust — with remediation guidance for each.

Audit Reports

Export a full SQL security audit report for compliance evidence, auditor submissions, and internal remediation tracking.

Highlights

Why SQL Audit?

  • Microsoft SQL Server supported — all versions from 2014 onwards
  • CIS Benchmark scoring with per-control pass/fail
  • Permission and role sprawl detection across all databases
  • TDE and connection encryption verification
  • Export-ready audit report for compliance and audit teams
Request Demo Talk to us
Included in OneView

SQL Audit is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

SQL Audit supports Microsoft SQL Server 2014 and all subsequent versions through to the current release, including SQL Server 2022 and SQL Server on Azure (including Azure SQL Managed Instance). Connection is made via a dedicated read-only service account — no elevated privileges are required for the audit connection.

The CIS Benchmark assessment evaluates SQL Server configuration across six control categories: Operating System level configuration, SQL Server installation and patches, database engine configuration, password policy and auditing, application security, and logging and auditing. Each control is evaluated as pass, fail, or not applicable with a specific remediation recommendation.

SQL Audit reviews every SQL Server login, user-to-login mapping, database role membership, and server role assignment. It flags logins with unnecessary sysadmin, securityadmin, or bulkadmin rights; database users mapped to dbo in databases they should not own; and orphaned users (users without a corresponding login) that represent stale access paths.

Databases holding personal data require verifiable security controls under both GDPR and POPI. SQL Audit provides evidence of encryption (TDE and backup encryption), access control hardening (least-privilege role assignments), and audit logging configuration — the three most scrutinised database security requirements during data protection audits.

Related modules

Code Manager

DevSecOps — security built into your pipeline

Learn more

Repo ManagerNew

Source code repository security and governance

Learn more

API AssessmentNew

Automated API security testing and vulnerability discovery

Learn more

See SQL Audit in action

Request a personalised demo and we'll show you exactly how SQL Audit works within your environment.

Request Free Demo All Modules