Also known as: Trustwave DbProtect.
At a glance
| Supported databases | Major relational and NoSQL engines (Oracle, SQL Server, Db2, MySQL, PostgreSQL, MongoDB and others), per product page logos |
| Auditing and activity monitoring | Yes, with anomaly detection and active response |
| Masking | Not documented |
| Encryption or tokenization | Not documented |
| Privileged access | Rights management to find over-privileged users; collects audit trails of privileged activity |
| Policy enforcement | Pre-built security and compliance policies; session termination or account disabling on alerts |
| Compliance reporting | CIS, DISA STIG, FISMA, CMMC and other frameworks |
| Deployment | Software only, on premises or cloud; managed service option |
| Licensing | Commercial, quote only |
DbProtect fits security teams whose priority is finding database vulnerabilities, misconfigurations and excessive privileges across many engines, with activity monitoring as a second layer. Its scanners are agentless and can be run by LevelBlue as a managed service. Release notices have been sparse since late 2024, so confirm the roadmap and supported versions before you commit.
Overview
DbProtect is a long-running database security product (LevelBlue says it has protected databases for more than 20 years), sold for years by Trustwave and now marketed as LevelBlue DbProtect. It discovers databases, objects, users and enabled security features, runs vulnerability, configuration and user-rights assessments against frameworks such as CIS and DISA STIG, and reports risk through dashboards. A companion scanner, AppDetectivePRO, appears on the same LevelBlue page.
On top of assessment, DbProtect offers database activity monitoring with behavioural anomaly detection and active responses such as ending a session or disabling an account. It is software only, with no proprietary appliances, and its knowledge base of checks is updated monthly by the LevelBlue SpiderLabs research team. LevelBlue can also run it as a managed service.
Key features
- Agentless vulnerability and configuration scanning against CIS, DISA STIG and other frameworks
- User and application rights analysis to find excessive privileges and support least privilege
- Discovery of databases, objects, users and sensitive data locations
- Database activity monitoring with behavioural anomaly detection and active responses
- Monthly knowledge base updates from LevelBlue SpiderLabs
- Risk dashboards and remediation tracking over time
- Optional managed service run by LevelBlue
Integrations and ecosystem
Pros and cons
Pros
- Strong focus on vulnerability, configuration and privilege assessment
- Agentless scanners and no hardware appliances
- Monthly check updates from a dedicated research team
- Can be delivered as a managed service
Cons
- No public pricing or licence metric
- Few public release notices since 6.6.13 in November 2024
- Branding is mid-transition, with Trustwave names still on support pages and documentation
Pricing
No public prices. LevelBlue's product brief says the software licensing model will not increase as the database environment grows and that LevelBlue managed services can run scanning, monitoring and updates for you, but gives no figures or licence metric. Upgrades are free for customers with a current maintenance agreement, according to LevelBlue's end-of-life notices.
Pricing checked on the vendor's official page on 7 November 2026. Prices change; confirm before buying.
Who it is best for
Security teams that want regular vulnerability, configuration and user-rights assessment across a mixed database estate, optionally run as a managed service.
Typical use cases
- Scheduled database vulnerability scans for audit evidence (CIS, DISA STIG, CMMC)
- Finding and removing excessive privileges before an access review
- Alerting on anomalous activity on high-value databases
- Outsourcing database scanning and monitoring to a managed security provider
Who should look elsewhere
- SQL Server-only shops that need a lighter, lower-cost permissions audit tool: see IDERA SQL Secure.
Verdict
DbProtect remains a purchasable, assessment-first database security product, now under LevelBlue after the Trustwave acquisition. It is worth a look for privilege and vulnerability coverage across many engines, provided LevelBlue confirms current version support and roadmap.
Frequently asked questions
Is Trustwave DbProtect still available?
Yes, as LevelBlue DbProtect. LevelBlue completed its acquisition of Trustwave on 19 August 2025, Trustwave DbProtect pages now redirect to levelblue.com, and LevelBlue published a DbProtect product brief in June 2026.
Does DbProtect need agents?
Its assessment scanners are agentless, and LevelBlue describes it as software only, with no proprietary appliances or network re-architecture.
What is the latest DbProtect version?
The newest release notice found is DbProtect Suite 6.6.13, announced on 14 November 2024, which added scanning for Percona 8.3 and MariaDB 11.4 and dropped end-of-support targets. Ask LevelBlue whether later builds exist.
Sources
- LevelBlue DbProtect product page
- LevelBlue DbProtect product brief (June 2026)
- DbProtect Suite 6.6.13 release notice
- LevelBlue completes acquisition of Trustwave (19 August 2025)
Checked November 2026.
Listed in: Database Security & Auditing.
How we research reviews and what star ratings mean: our editorial method.