In most enterprise stacks today, the database is where all our secrets wait. It’s part safe house, ready room, and staging ground for the bits that may be intensely personal or extremely valuable. Defending it against all incursions is one of the most important jobs for the database administrators, programmers, and DevOps teams that rely upon it.

Alas, the job isn’t easy. The creators give us all the tools. They build in good security measures and document them. Yet dozens of potential errors, oversights, and mistakes both stupid and understandable make it an endless challenge.