- Home
- Data Security Posture Management Software
- Poirot DSPM
Poirot DSPM
What it is
Poirot DSPM is a free, self-hosted tool for finding sensitive information in databases, cloud storage, and message queues. It scans for API keys, secrets, personally identifiable information, and other data using 38+ detection patterns, including credentials, authentication tokens, private keys, and custom regular expressions. Scans can run on a schedule or on demand. Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database password checks. Each finding gets a 0.0–1.0 confidence score informed by validation results, context, and pattern specificity. Local Ollama-based classification is available; the site says no data leaves the user's infrastructure. Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive, while additional sources are marked “Coming soon.” Integrations include TheHive, Keycloak, Ollama, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks. Deployment options include Docker Compose, Kubernetes, and Helm. Poirot is open source under the MIT License and offers Keycloak support for SSO and role-based access controls.
For and against
For
- Free and open source under the MIT License.
- Supports scheduled and on-demand scans.
- Uses 38+ detection patterns and six validators.
- Offers Docker Compose, Kubernetes, and Helm deployments.
- Local Ollama classification keeps data in the infrastructure, per the site.
Against
- Additional data sources are marked “Coming soon.”
- Deployment is self-hosted.
- Findings are assigned confidence scores rather than certainty.
The verdict
Poirot DSPM offers broad detection and deployment options for teams seeking self-hosted sensitive-data discovery. Confirm that its currently listed sources cover the systems you need to scan.
Who it suits
Poirot DSPM suits organizations that want to scan their own data infrastructure for secrets and personal information. It is relevant to teams able to deploy and operate self-hosted software.
Plans and prices
Poirot DSPM
Open source · Self-hosted · Free forever
Read 11 Oct 2026 · poirotsecurity.com
On the record
- AI classification
- Poirot offers local Ollama-based classification and says no data leaves the user's infrastructure.poirotsecurity.com · read 11 Oct 2026
- Confidence scoring
- Findings receive a 0.0–1.0 confidence score based on validation results, context analysis, and pattern specificity.poirotsecurity.com · read 11 Oct 2026
- Data sources
- Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive; additional sources are marked “Coming soon.”poirotsecurity.com · read 11 Oct 2026
- Deployment
- The site lists Docker Compose, Kubernetes, and Helm deployment options.poirotsecurity.com · read 11 Oct 2026
- Detection
- The site lists 38+ detection patterns covering API keys, database credentials, authentication tokens, private keys, PII, and custom regex patterns.poirotsecurity.com · read 11 Oct 2026
- Integrations
- Listed integrations include TheHive, Keycloak, Ollama, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks.poirotsecurity.com · read 11 Oct 2026
- License
- The site says Poirot is open source under the MIT License.poirotsecurity.com · read 11 Oct 2026
- Purpose
- Poirot scans databases, cloud storage, and message queues to detect API keys, secrets, PII, and other sensitive information.poirotsecurity.com · read 11 Oct 2026
- Scanning
- It supports scheduled automated scans and on-demand scans.poirotsecurity.com · read 11 Oct 2026
- Security
- The site describes Keycloak support for SSO and RBAC, including realm support, group mapping, and secure token validation.poirotsecurity.com · read 11 Oct 2026
- Support
- The site provides an issue-reporting link and lists [email protected] as a contact address.poirotsecurity.com · read 11 Oct 2026
- Validation
- Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database password checks.poirotsecurity.com · read 11 Oct 2026
