Skip to content
SPECIFICTION
Get listed

Poirot DSPM

poirotsecurity.com

Free plan Self-hosted
Visit poirotsecurity.com
Spec score 7.3 #17 of 34 in Data Security Posture Management Software

What it is

Poirot DSPM is a free, self-hosted tool that scans databases, cloud storage, and message queues for API keys, secrets, personally identifiable information, and other sensitive data. It supports scheduled and on-demand scans, using more than 38 detection patterns for credentials, tokens, private keys, PII, and custom regular expressions. Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database-password checks. Each finding receives a confidence score from 0.0 to 1.0 based on validation results, context analysis, and pattern specificity. Local Ollama classification is available, with the site stating that data stays within the user's infrastructure. Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive; other sources are marked as coming soon. Integrations include TheHive, Keycloak, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks. Deployment options are Docker Compose, Kubernetes, and Helm. Poirot is open source under the MIT License. Keycloak support covers SSO and role-based access controls, including realm support, group mapping, and secure token validation. The listed plan is free forever and self-hosted.

Spec sheet

Purpose
Poirot scans databases, cloud storage, and message queues to detect API keys, secrets, PII, and other sensitive information.Read 11 Oct 2026 · poirotsecurity.com
Deployment
The site lists Docker Compose, Kubernetes, and Helm deployment options.Read 11 Oct 2026 · poirotsecurity.com
Integrations
Listed integrations include TheHive, Keycloak, Ollama, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks.Read 11 Oct 2026 · poirotsecurity.com
Security
The site describes Keycloak support for SSO and RBAC, including realm support, group mapping, and secure token validation.Read 11 Oct 2026 · poirotsecurity.com
Support
The site provides an issue-reporting link and lists [email protected] as a contact address.Read 11 Oct 2026 · poirotsecurity.com
License
The site says Poirot is open source under the MIT License.Read 11 Oct 2026 · poirotsecurity.com
AI classification
Poirot offers local Ollama-based classification and says no data leaves the user's infrastructure.Read 11 Oct 2026 · poirotsecurity.com
Confidence scoring
Findings receive a 0.0–1.0 confidence score based on validation results, context analysis, and pattern specificity.Read 11 Oct 2026 · poirotsecurity.com
Data sources
Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive; additional sources are marked “Coming soon.”Read 11 Oct 2026 · poirotsecurity.com
Detection
The site lists 38+ detection patterns covering API keys, database credentials, authentication tokens, private keys, PII, and custom regex patterns.Read 11 Oct 2026 · poirotsecurity.com
Scanning
It supports scheduled automated scans and on-demand scans.Read 11 Oct 2026 · poirotsecurity.com
Validation
Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database password checks.Read 11 Oct 2026 · poirotsecurity.com

Plans and prices

Poirot DSPM Free Open source · Self-hosted · Free forever Read 11 Oct 2026 · poirotsecurity.com

Every Poirot DSPM plan and price →

Strong points and limits

Strong points

  • Scheduled and on-demand scanning
  • 38+ detection patterns and six validators
  • Local Ollama classification keeps data in infrastructure
  • Docker Compose, Kubernetes, and Helm deployment
  • Open source under the MIT License

Limits

  • Self-hosted deployment is required
  • Additional data sources are marked coming soon
  • Confidence scores depend on listed validation and context
  • Support is provided through issues and email

Who it suits

Poirot DSPM suits organizations that need self-hosted sensitive-data discovery across databases, cloud storage, and queues. It is particularly relevant where local AI classification, open-source deployment, and listed security integrations matter.

Verdict

Poirot DSPM combines broad source scanning with pattern validation, confidence scoring, and local classification. Its free, open-source, self-hosted model suits teams able to operate the deployment and connect the listed integrations.

Where Specifiction places it

Alternatives to Poirot DSPMAll alternatives →