Sarpedon Database Security Assessment for SQL Server

Find SQL Server security weaknesses, fix them, and check again. The Sarpedon Database Security Assessment is a Windows application your DBAs run in your own environment: more than 80 automated checks, recommendations and local reports, without uploading your evidence or findings.

Available now for early adopters: buy direct by invoice at the launch price. Coming soon to AWS Marketplace.

Buy direct now Book a 20-Minute Call

Database Security Assessment dashboard: servers with FAIL and WARNING, results by outcome and effort to resolve.
Review security findings across your SQL Server environment.

What you get

Executive summaryGenerated automatically, to share the results.
Findings with evidenceAnd a recommendation for each.
DashboardsSecurity areas, widespread findings, results over time.
Multiple instancesIn one application, with JSON results for further processing.

What it checks

More than 80 checks across 14 security areas, including server configuration, privileges and escalation risks, server and database accounts, orphaned accounts, auto-starting code, authentication, auditing, and encryption and key strength.

Top security areas across servers and the most widespread findings, with outcome and effort for each.
See which security areas and checks need attention across all your servers.

Your assessment data stays in your environment

The Sarpedon Database Security Assessment as a Windows desktop application, with its icon on the desktop.
A Windows application on your own machine. The assessment runs locally.

Collection, evaluation and reports stay on your machines. The application does not upload SQL Server names, collected evidence, findings or reports. Our authorization service handles your account, plan, acceptance of the terms, pseudonymous identifiers for registered instances, and operational records.

Verify your remediation

Assess again after changes and see which findings remain.

Open FAIL and WARNING findings across successive assessments, with dashed comparison boundaries.
Track findings across repeated assessments. Dashed lines mark where scope or coverage changed.

Requirements

  • SQL Server 2019, 2022 or 2025, on premises or on virtual machines you operate, for example on Amazon EC2 or Azure. Not Amazon RDS, Azure SQL Database or Azure SQL Managed Instance.
  • A Windows machine with network access to your SQL Servers, and internet access to start assessments.
  • sysadmin on the assessed instances. Collection is read-only: the assessment does not change your configuration or application data. Test it on a non-production instance first.

Getting started

  1. Purchase and receive your account invitation.
  2. Install the Windows application and connect to your SQL Server instances.
  3. Assess, fix, repeat within your pack.
Validation step before an assessment: servers that can start, with a warning, blocked or excluded.
Before each assessment, the application checks connectivity, permissions and instance identity.

Free, self-service or expert?

Free Community EditionDatabase Security Assessment (self-service)Expert assessment
What you get27 core checks in a PowerShell script, local HTML reportMore than 80 checks in a Windows application: multiple instances, evidence, dashboards, repeat assessmentsOur team’s review: attack paths, priorities in your context, broader scope, a walkthrough
Who does the workYouYour DBAsOur team, with yours
How to get itFree downloadPortable PackFixed-price proposal

Price and how to buy

Portable PackRegular priceLaunch priceFor example
10 assessment runs, 12 months$2,495$1,9955 instances before and after a migration

One run assesses one instance once. Prices in USD; the launch price applies to purchases completed by December 31, 2026. Need more runs? Ask us for a private offer. An Annual Plan for regularly assessed instances is coming soon.

Buy direct now, for early adopters

No AWS account required. We send you an order form and an invoice and set up your access once payment is received. We need a name and an email address for the account, and your company name, billing address and any purchase-order number for the invoice. Buy direct now

AWS Marketplace, coming soon

Billed to your AWS account. Get notified at launch

Built by SQL Server security specialists

From the team behind our expert assessment, founded by Andreas Wolter, a former Microsoft Senior Program Manager for SQL Server security and one of only seven Microsoft Certified Solutions Masters (MCSM): Data Platform. Meet the team.

Frequently asked questions

Is any assessment data uploaded?

No. The application does not upload your SQL Server names, collected evidence, findings or reports. Our authorization service handles account, plan and operational data, plus pseudonymous identifiers for your registered instances.

Why does it need sysadmin?

Some security settings are only visible to sysadmin. The assessment does not change your SQL Server configuration or application data.

Does it work without internet access?

No, starting an assessment requires a connection to our authorization service. For isolated networks, our expert assessment can run fully on site.

Can we see a sample report?

Yes, on request. Tell us about your environment and we’ll send it to you.

Be among the first to assess your SQL Servers yourself

Early adopters can buy the Portable Pack directly now, at the launch price until December 31, 2026. AWS Marketplace follows soon.

Buy direct nowBook a 20-Minute Call