Your database has run for years without incident. That is not the same as healthy.
A read-only security audit and health check of your Oracle database, across five domains, delivered as an audit-grade GAP report that names every finding, its severity, and the fix.
Book your assessment →Most reviews look at security alone. That is where the smallest risk usually sits.
ForgeDBSA assesses security and access, performance and capacity, backup and recovery, architecture, and licence compliance. The findings that cost the most, unlicensed feature use and unverified recoverability, live outside a conventional security review entirely.
Five domains, on every engagement.
Read-only throughout. Nothing in your environment is changed, and there is no production impact.
Security & Access Control
Accounts, roles and privileges, password policy, audit configuration and network encryption.
Performance & Capacity
SGA and PGA sizing, tablespace health, top SQL analysis and index health across the instance.
Backup, Recovery & Continuity
Backup configuration and history, archivelog gaps, Data Guard, and RPO and RTO alignment.
Architecture & Maintainability
Patch currency, deprecated features, parameter review, alert log analysis and invalid objects.
Licence & Compliance
Options and packs in use versus licences held, edition validation and feature usage, before an audit finds it.
Your GAP Report
Every finding with severity, root cause and the specific fix, mapped to a recognised standard.
A structured, fixed-scope engagement.
Scoping call
Thirty minutes to confirm database count, environments and any add-on scope.
Discovery and audit
We install the ForgeDBSA assessment package and collect across all five domains, read-only.
GAP report
Every finding documented with severity, root cause, the specific fix and the standard it maps to.
Closing readout
A live session walking your team through the findings, the dashboard and the roadmap.
ForgeDBSA Essential Pack.
Audit and GAP report, fixed scope. You know the cost before we start, and you know exactly what lands at the end.
in a single engagement
Five domains, assessed end to end. One fixed cost.
- Full GAP report: every finding with severity, root cause and remediation
- Security and privilege matrix of users, roles and grants
- One-page executive dashboard, RAG status per domain
- Prioritised recommendations roadmap
- Live closing readout with your team
An Oracle practice, not a scanning service.
Audit-grade, not opinion
Every finding traces to CIS, STIG, GDPR or Oracle Recommended Practices, the same benchmarks your auditors already work from.
Read-only by design
Nothing in your environment is changed and there is no production impact. The assessment observes, it does not touch.
Findings in plain English
Each technical finding is translated into business language, so the report is usable well beyond the DBA team.
Fixed scope, known cost
One price for the assessment. No open-ended discovery, and no estimate for remediation before anyone has looked.
Oracle specialists
An Oracle Partner practice with dual-shore delivery across the Middle East and India, and eighteen years in enterprise Oracle.
We stay past the report
We don't just implement. We stay to help you grow, so remediation and ongoing assurance sit with a team that already knows your estate.
The details, up front.
Will this affect our production database?
No. The assessment is read-only from end to end. We collect configuration and metadata, we do not change parameters, objects or data, and there is no measurable load on the instance.
What access do you need?
Read-only database access and limited host-level visibility for the operating system checks. We confirm exactly what is required on the scoping call, before anything is arranged.
How many databases does the Essential Pack cover?
Between two and five Oracle databases in a single engagement. If your estate is larger, we scope it on the call and price accordingly.
Does the price include fixing what you find?
No, and that is deliberate. Remediation effort depends entirely on the number and type of findings, which is what the assessment establishes. We quote it separately against your own report, so you are never paying for an estimate made before anyone looked.
Do you only work on databases you implemented?
No. We specialise in stepping into environments built by anyone, and a large share of our assessments are on estates we have never touched before.
How do we get started?
Fill in the form below. A member of our Oracle team will reach out to arrange a short scoping call and confirm the database count.
Find out where your database actually stands.
Share a few details and our Oracle team will reach out to arrange your scoping call.