OraScan

OraScan is a multi–environment auditing application developed to assess the security of Oracle Web applications. The finely detailed level of auditing supported by OraScan allows systems administrators and security professionals to gain full control of security issues surrounding online applications and front-end servers.
OraScan performs robust, in–depth security vulnerability audits, seeking out potential problem areas such as:

  • SQL Injection
  • Cross–Site Scripting
  • Poor Web Server configuration

In addition, OraScan can be deployed to audit the configuration of IAS Web Servers, ensuring that the web application portion of your database software architecture is free of any security weaknesses.

OraScan Datasheet (pdf) OraScan Datasheet (pdf)

Products Overview (pdf) Products Overview (pdf)

Download Download Products and Updates from NGSSoftware

Flexible Auditing – capable of auditing bespoke Oracle Web applications whether they are deployed on an Oracle Internet Application Server, or any other Web Server

Complete Automation – front–end server security and online applications

Configuration Audits – ensures that no security holes exist within the base software (includes PL/SQL, JSP, SQLJSP and XSQL)

Advance Spidering – derives the structure of an Oracle Web application and employs tests to each functional aspect

Flexible Reporting – Text File, XML and HTML (Static or Dynamic)

OraScan can be used with the following operating systems:

Microsoft Windows 2003, Microsoft Windows 2000, Microsoft Windows XP, Microsoft Windows NT Version 4.0 (Service Pack 4)

Computer Specification:

Minimum Pentium III or Athlon at 1GHz (Pentium 4 at 2Ghz or Athlon XP 2000+ recommended)

Minimum 256Mb Ram (512Mb+ recommended)

20Mb free disk space for installation and program files.


SC Awards 2008


SC Magazine Awards 2008

NGSSoftware wins 'Best Security Company'.

ITA 2008


2008 International Trade Awards

NGSSoftware named as South-East England regional winners at the 2008 International Trade Awards.

SLBA 2008


South London Business Awards 2008

David Litchfield named as 'Entrepreneur of the Year' at the South London Business Awards 2008.

Latest Vacancies

Experienced CLAS consultant

NGSSoftware are seeking an experienced CLAS consultant capable of writing Security Targets and Evaluation Work Plans for CTAS.

Please send us your CV or resume.

NGS Offices

NGS have offices located in London & St Andrews (UK) and Sydney (Australia).

NGS Consulting

Why do companies around the world – and around the corner – turn to NGS?

Discover what we could do for your business »

NGS Security Training

Find out why we have provided training to some of the world's most security conscious organisations.

Learn from the best!

We regularly present and speak at international security conferences throughout the world.

OWASP AppSec Europe 2008

AusCERT 2008

ITWeb Security Summit

Customer Testimonials

Read what some of our satisfied customers are saying about us.

NGS Publications

Web Application Hacker's Handbook

Oracle Hacker's Handbook

Database Hacker's Handbook

The Shellcoder's Handbook

SQL Server Security

Configuring IPCop Firewalls


CHECK