Audit database connection strings for security issues: plaintext passwords, disabled SSL, public IPs, default ports.