I was wondering if anyone knew of a good application to search for unencrypted credit cards on a database. No it is not for criminal use. My company does PCI DSS audits. Along with a yearly pen test we have to scan the environment that holds credit card data to make sure they are encrypted properly. I know Nessus has a plug in on it. The QSA's in our office need an application that has low false positive's. Windows compatible. Thanks