The Forrester Wave™: Enterprise Database Auditing And Real-Time Protection, Q4 2007

Forrester's evaluation of leading enterprise database auditing and real-time protection vendors across 116 criteria found Guardium and Imperva to have established leadership positions thanks to their enterprise database auditing capabilities, breadth of focus, and strong product and corporate strategy. Tizor Systems, Application Security, and Lumigent Technologies also emerged as Leaders able to handle and support most enterprise database auditing requirements. Symantec, IBM Consul InSight (recently renamed Tivoli Compliance Insight Manager), RippleTech, Embarcadero Technologies, and Oracle are Strong Performers best suited, because they lack a comprehensive set of auditing, real-time protection, and other features and functionality, to basic to moderate auditing requirements. Oracle's database management system (DBMS) tops other DBMS vendors by having the best set of native auditing features; Microsoft, Sybase, and IBM DB2 trail, largely because they have only basic auditing capabilities. Although IBM Audit Management Expert (AME) offers only basic auditing capabilities, it integrates well with IBM's DB2 and IMS DBMSes running on the mainframe.