Security

Application Security Inc.
AppDetective - Network-based vulnerability assessment tool, DbEncrypt - encrypt column and row data, AppRadar - Intrusion detection.
http://www.appsecinc.com/products/

CGI Security: Oracle
Web application security, FAQ and PDFs about Oracle security configuration.
http://www.cgisecurity.com/database/oracle/

Cqure.net
Security tools and links to security related information. OracleSAMDump, OraclePWGUess, OracleQuery.
http://www.cqure.net/

ensync solutions
Oracle Security Check will scan an Oracle instance and check for known default usernames and passwords.
http://www.ensyncsolutions.com/prod_oracle_security.html

Integrigy
AppSentry and AppDefend - intrusion prevention for Oracle database and Oracle applications.
http://www.integrigy.com/

ISS - Internet Security Systems
A pioneer and leading supplier of adaptive security management systems, providing innovative software that enables maximum protection from network security risks.
http://www.iss.net/

Nessus
Security scanner for Oracle and various flavors of Unix. Performs over 900 remote security checks, and suggests solutions for security problems.
http://www.nessus.org/

NetIQ: VigilEnt Security Manager
Establish security configuration baselines and continuously audit for security vulnerabilities.
http://www.netiq.com/products/vsm/default.asp

Network Intelligence India
The AuditPro suite of security auditing software. Also security services including penetration testing, and vulnerability assessment.
http://www.niiconsulting.com

NGS Software
Vulnerability scanners, SQL and Oracle auditing applications.
http://www.nextgenss.com/

OCI SPY
Oracle Call Interface (OCI) client side tracing, monitoring and profiling utility. A free tool that allows OCI calls to be logged to a trace file.
http://www.geocities.com/ocispy/

Pete Finnigan
A website and weblog aimed squarely at those interested in the security of Oracle databases.
http://www.petefinnigan.com/

P6Spy
An open source Java tool that intercepts and logs all database statements that use JDBC. Also some GUI add-ons that allow SQL analysis and caching.
http://www.p6spy.com/

Red-Database-Security
Oracle Security alerts, published and upcoming and security whitepapers.
http://www.red-database-security.com

Relational Database Consultants, Inc.
Offer a database encryption tool, as well as performance tuning and remote DBA support services. Based in Los Angeles, California, USA.
http://www.relationalwizards.com/

Sentrigo
A host-based database security monitoring, auditing and prevention tool.
http://www.sentrigo.com/

A simple Oracle installation security scanner
Check for Known Passwords.
http://www.derkeiler.com/Mailing-Lists/Securiteam/2002-01/0056.html

Symantec Enterprise Security Manager
Discovery of policy deviations and vulnerabilities for mission-critical applications. Policies are designed for specific version combinations, such as Oracle 9i on Solaris 8, rather than for the least common denominator.
http://www.symantec.com/enterprise/products/overview.jsp?pcid=1004&pvid=855_1