- Home
- Database Vulnerability Scanners
- Defensia Database Security
Defensia Database Security
Barcelona, Spain
What it is
Defensia Database Security monitors database authentication activity and checks whether database ports are exposed. It provides authentication-log monitoring for MySQL/MariaDB, PostgreSQL, and MongoDB, and checks Redis for port exposure. At startup, its agent checks ports 3306, 5432, 27017, and 6379; if one is bound to 0.0.0.0, the dashboard receives an advisory. Repeated authentication failures can lead to IP blocking through iptables or nftables. The agent installs as a systemd service and detects MySQL, PostgreSQL, and MongoDB log files automatically. Deployment options include Docker, Docker Swarm, and Kubernetes, with a Helm chart for Kubernetes. The dashboard displays attack timelines, blocked IPs, and port advisories. Linux kernel 4.x or newer, root or sudo access, and HTTPS access to the Defensia panel are required. The free plan covers one server and monitor-only detection; paid service starts at €9/mo, with a 14-day trial.
For and against
For
- Monitors authentication logs for three database families.
- Checks Redis port exposure at startup.
- Supports Docker, Swarm, and Kubernetes deployments.
- Dashboard shows attack timelines and port advisories.
Against
- Free plan is limited to one server.
- Free detection runs in monitor mode without blocking.
- Requires Linux kernel 4.x or newer and root or sudo access.
The verdict
Defensia combines database authentication monitoring with port-exposure checks and optional IP blocking. The free plan is limited to one server and does not block attacks; Pro starts at €9/mo.
Who it suits
It suits Linux administrators who want database-port checks and authentication monitoring across supported database systems. The free plan may fit a single server when monitor-only detection is sufficient.
Plans and prices
Free
1 server · 2,000 events/month · 3 days log retention · monitor mode only
Read 3 Oct 2026 · defensia.cloud
Pro
Unlimited servers · unlimited events · 90 days log retention · 14-day trial, up to 3 servers
Read 3 Oct 2026 · defensia.cloud
On the record
- Automatic blocking
- Repeated authentication failures can trigger IP blocking through iptables or nftables.defensia.cloud · read 3 Oct 2026
- Dashboard and events
- The dashboard displays attack timelines, blocked IPs, and port-exposure advisories.defensia.cloud · read 3 Oct 2026
- Database coverage
- It provides full authentication-log monitoring for MySQL/MariaDB, PostgreSQL, and MongoDB, plus Redis port-exposure detection.defensia.cloud · read 3 Oct 2026
- Free-plan limit
- The free plan allows one server and detects attacks in monitor mode without blocking them.defensia.cloud · read 3 Oct 2026
- Installation
- The agent installs as a systemd service and automatically detects MySQL, PostgreSQL, and MongoDB log files.defensia.cloud · read 3 Oct 2026
- Port checks
- At startup, the agent checks ports 3306, 5432, 27017, and 6379 and creates a dashboard advisory if a port is bound to 0.0.0.0.defensia.cloud · read 3 Oct 2026
- Privacy and data
- The privacy policy says account passwords are cryptographically hashed and that connected-server data includes hostnames, IP addresses, operating-system information, and security events.defensia.cloud · read 3 Oct 2026
- Privacy compliance
- The privacy policy says Defensia is committed to handling personal information in compliance with GDPR and other applicable data-protection laws.defensia.cloud · read 3 Oct 2026
- Pro integrations
- The Pro plan lists Slack, Discord, and webhook alerts.defensia.cloud · read 3 Oct 2026
- Purpose
- Defensia detects exposed database ports and monitors database authentication failures for brute-force attacks.defensia.cloud · read 3 Oct 2026
- Requirements
- The agent requires Linux kernel 4.x or newer, root or sudo access, and HTTPS internet access to the Defensia panel.defensia.cloud · read 3 Oct 2026
- Support
- The Free plan includes community support, while Pro includes priority email support.defensia.cloud · read 3 Oct 2026
- Supported deployment
- The product supports Docker, Docker Swarm, and Kubernetes deployment, including a Helm chart for Kubernetes.defensia.cloud · read 3 Oct 2026
