Danny de Haan
Database Security & Infrastructure Advocate || Solutions Engineer @ Redgate
Roermond, The Netherlands
Actions
Danny is a seasoned IT professional with nearly 20 years of experience, specializing in SQL Server and the Microsoft Data Platform. With over 15 years dedicated to SQL Server, he's built a reputation for his expertise in Security, Risk Management, and Compliance, ensuring that industry best practices and regulatory requirements are met from an infrastructural perspective.
Currently, Danny works as a Solutions Engineer at Redgate Software, where he helps customers on their Database Dev(Sec)Ops journey.
He's a passionate advocate for secure database usage, regularly speaking at conferences and events where he shares insights on (data) security and compliance.
Area of Expertise
Topics
Securing the SQL Server Data Platform: Preventing Data Loss and Ensuring Data Privacy
In today’s world of escalating cyber threats, securing your SQL Server environment has become a critical priority. The phrase "It's not a matter of if, but when you're going to be hacked" has never been more true. With external attacks becoming more sophisticated, organizations must prepare for the inevitable and safeguard their SQL Server data platform against data breaches, unauthorized access, and data loss.
This talk will focus on the essential steps to secure SQL Server environments against external threats and prevent the loss of critical data. We'll explore how to design a security strategy that reduces the attack surface and ensures your data is protected - even when facing advanced, targeted attacks.
From securing network connections and enforcing strong authentication mechanisms to implementing encryption, we'll discuss a range of practical, actionable measures that will help you safeguard your SQL Server Platform from malicious external actors.
From Reactive to Resilient: Navigating the Data Security Maturity Journey
In today’s hyper-connected, multi-cloud world, data security is no longer a single-platform challenge; it’s a cross-platform imperative. This session introduces a practical, vendor-neutral Data Security Maturity Model that guides organizations from reactive, ad-hoc controls to adaptive, resilient security practices.
Attendees will explore the four maturity levels through real-world, platform-agnostic examples.
We will cover various modern trends and participants will learn how to assess, identify and improve their environments.
Securing the SQL Server Data Platform: Defining a security strategy
In today’s world of escalating cyber threats, securing your SQL Server environment has become a critical priority. The phrase "It's not a matter of if, but when you're going to be hacked" has never been more true. With external attacks becoming more sophisticated, organizations must prepare for the inevitable and safeguard their SQL Server data platform against data breaches, unauthorized access, and data loss.
This talk will focus on the essential steps to secure SQL Server environments against external threats and prevent the loss of critical data. We'll explore how to design a security strategy that reduces the attack surface and ensures your data is protected - even when facing advanced, targeted attacks.
From securing network connections and enforcing strong authentication mechanisms to implementing encryption, we'll discuss a range of practical, actionable measures that will help you safeguard your SQL Server Platform from malicious external actors. How to monitor and audit these settings, not only for yourself, but also for compliancy purposes.
From Zero to Pipeline: My Journey with GitHub Copilot, Terraform, and Ansible
When I first set out to build a deployment pipeline for my test and demo environments, I had no prior knowledge of Terraform or Ansible. Honestly, I didn’t even know where to start. But with GitHub Copilot by my side, I was able to build infrastructure code, create configuration playbooks, and set up a working pipeline.
In this session, I’ll share my personal journey; the challenges I faced as a complete beginner, how Copilot’s suggestions helped me overcome roadblocks, and the lessons I learned about trusting (and verifying) AI-generated code. You’ll see how Copilot can act as a peer programmer, accelerating your learning curve and helping you build real-world automation even if you’re starting from scratch.
Expect honest reflections, and practical takeaways you can apply immediately; whether you’re new to DevOps or just curious about how AI can help you learn faster.
In-depth Security for your on-premises SQL Server Data Platform
In today's volatile environment where we hear more and more about hacks and ransomware, we want to protect our infrastructure, our assets. In this session, we will see an example of in-depth security. How to harden from the infrastructure, OS, and into the database. Giving tips and examples from each layer how you can get started with security by design.
Database Development with a Security-First Mentality
In today’s increasingly digital world, ensuring the security of data is paramount. This session, will dive into the essential practices and principles of secure SQL Server database development. Attendees will learn how to adopt a proactive approach to database security from the initial stages of development, incorporating best practices to safeguard sensitive information against unauthorized access, data breaches, and malicious attacks.
The session will explore critical security features within SQL Server, such as encryption, authentication, role-based access control, and auditing. Furthermore, we will address the importance of regular security assessments and continuous monitoring to stay ahead of evolving threats.
By the end of the presentation, developers will have the knowledge and tools to integrate security seamlessly into the database development lifecycle, ensuring their SQL Server databases are resilient and compliant with industry standards and regulations.
Kerberos: A deep dive into delegation & SQL Server
In this session, we will explore the inner workings of Kerberos authentication in Active Directory and its critical role in modern network security, with a special focus on delegation and its application to SQL Server environments.
Kerberos is the gold standard for secure authentication in distributed systems, but its complexities - particularly around delegation - can be challenging to navigate. This talk will break down the key concepts of Kerberos, explaining what it is, how it works, from the login process up to the use of services like SQL Server.
We'll be looking into delegation, the technical aspects of it, how the various delegation types work, including their weaknesses and how this relates to our SQL Data Platform.
Last but not least we'll also take a look at attack scenario's hackers use and what you can do to prevent certain attacks.
Treating Security as a Data Discipline in Your Organization
Security operations rely on logs, alerts, and event data, yet these sources are rarely managed with the same structure, governance, or planning as other organisational data. When Security and Compliance and your data treatment don’t align, the amount of data gathered can become costly, you start looking for that needle in a haystack when you have to analyse your data, or even worse, do a post-mortem after a breach.
In this session, we’ll explore the gaps that appear when data practices are not applied to security products and telemetry. The absence of well-defined data models, retention policies, and optimised queries leads to operational blind spots and unnecessary cost. Leadership often assumes security tooling automatically manages data quality and structure, but advanced analytics, accurate reporting, and faster investigations all depend on intentional data design.
Practical examples will illustrate how structured approaches improve event analysis: visualising anomalies, determining what data to collect, and designing queries that support both investigations and long-term reporting. Regardless of which security product or platform your organisation uses, defining your security and compliance standards allows your data to better support and strengthen detection, reporting and incident response.
We will show you how basic data principles such as retention strategies, clear schemas, governed access, and efficient queries, can provide you the foundation for reliable, actionable and data-driven security operations across your organisation.
Trust No Agent: Security and Governance for SQL Server 2025's MCP Server
SQL Server 2025 ships with a native MCP server: a purpose-built interface that lets AI agents and LLM-powered tools query your databases directly. Transformative for AI-driven workflows. Also a new attack surface that most security teams haven't started thinking about yet.
This session examines what the MCP interface actually exposes, how authentication and authorisation work at the MCP layer, and what the default configuration assumes that you should not accept in production. The threat model includes prompt injection through MCP, over-privileged agent connections, unaudited query generation, and data exfiltration paths that bypass conventional monitoring.
From there we build the controls: least-privilege agent identities, row-level security for AI sessions, MCP-aware audit configuration, and detection patterns that flag unusual agent behaviour. A practical security framework for enabling SQL Server 2025's AI capabilities without handing an attacker a direct line to your data.
You Are Not Prepared: The SQL Server Audit Trail That Goes Nowhere
SQL Server produces thousands of security-relevant events every day: login failures, permission grants, schema changes, privilege escalations, unusual query patterns. Almost none of it reaches the SOC. Security teams assume database teams have the threat covered. Database teams assume the SOC doesn't need the data. The result is a blind spot positioned directly in front of your most sensitive information, and while nobody's watching the threat meter, the boss is already in the room.
This session pulls you out of the fire. We cover what SQL Server actually produces and what's worth collecting; SQL Server Audit, Extended Events, login telemetry, and Agent history each serve a different purpose. From there: structuring data for fast investigation, forwarding it to Azure Monitor, Sentinel, or any syslog-compatible SIEM, and designing alerts that surface real threats without overwhelming the SOC.
The irony is that WoW raiders obsess over log parsers to optimise every raid... Your security team should be doing exactly the same thing.
Come With Me If You Want to Live - Ransomware-Proofing the Data Platform
Most organisations have a backup strategy. Far fewer have a recovery strategy that actually works after a ransomware attack. The difference matters when Judgment Day arrives and the clock is running.
Modern ransomware operators don't act like opportunists, they act like the T-1000. Patient, methodical, and already inside the perimeter long before they strike. Before encrypting production, they spend days or weeks compromising backup agents, corrupting backup files, stripping recovery credentials, and poisoning replicas. They can't be bargained with and they can't be reasoned with. By the time you see the ransom note, the backups you thought you had are already gone.
This session is built around that threat model and the conviction that there is no fate but what we make. We cover immutable backup architectures (Azure Blob immutability, WORM storage, deletion protection) and credential isolation: ensuring backup systems operate behind an identity boundary that production cannot cross. We look at what the 3-2-1-1 model looks like in a real database environment, how to test recovery under full-compromise conditions, and the process failures that turn survivable attacks into total losses.
Securing the SQL Server Data Platform: Strategy, Hardening, and Real‑World Defense
In a world where data breaches, ransomware, and targeted attacks are no longer hypothetical, securing your SQL Server data platform requires more than a checklist; it demands a strategy.
This full‑day workshop takes you on a practical, end‑to‑end journey through designing, hardening, and defending a secure SQL Server environment, whether on‑premises or hybrid.
We begin by establishing the foundations of security by design: understanding threat models, compliance requirements, and architectural decisions that shape a resilient data platform. From there, we dive deep into real‑world hardening techniques across every layer: network, infrastructure, operating system, and SQL Server itself; showing you how to reduce your attack surface and build a platform that’s secure by default.
As the day progresses, we shift from theory to hands‑on implementation. You’ll learn how to enforce strong authentication, secure network paths, apply encryption effectively, and configure your data platform to withstand modern external threats. We’ll explore monitoring strategies, auditing approaches, and how to maintain ongoing compliance without drowning in alerts or paperwork.
Finally, we tackle one of the most overlooked aspects of database security: the human element. You’ll discover how to guide developers toward secure coding practices, prevent accidental data exposure, and build a culture where security is part of everyday development, not an afterthought.
By the end of the workshop, you’ll walk away with a clear blueprint for securing your SQL Server data platform from design to implementation, along with practical steps you can apply immediately to make your environment a harder target than the one next door.
Data Saturday Holland 2026 Sessionize Event Upcoming
Data Saturday Oslo 2026 Sessionize Event Upcoming
Level Up Tech 2026 Sessionize Event
Data Saturday Rheinland 2026 Sessionize Event
TDWI München 2026 Sessionize Event
DataGrillen 2026 Sessionize Event
SeaQL Saturday 2026 Sessionize Event
DevConf 2026 Sessionize Event
Data Left Unattended - Amsterdam Sessionize Event
Data Saturday & Fabric Friday Holland 2025 Sessionize Event
DATA:Scotland 2025 Sessionize Event
devConf 2025 Sessionize Event
SQL Konferenz 2025 Sessionize Event
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top