EVERYTHING XIAOMI
Get listed

Poirot DSPM

Poirot DSPM is a free, self-hosted tool for scanning databases, cloud storage, and message queues for API keys, credentials, personally identifiable informat…

Place
#19 of 34
Score
5.6
Poirot DSPM's website

What Poirot DSPM is

Poirot DSPM is a free, self-hosted tool for scanning databases, cloud storage, and message queues for API keys, credentials, personally identifiable information, and other sensitive data. It supports scheduled and on-demand scans, with 38+ detection patterns covering items such as authentication tokens, private keys, and custom regular expressions. Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database password checks. Findings receive a confidence score from 0.0 to 1.0 based on validation results, context analysis, and pattern specificity. Local Ollama-based classification is available, and the site says no data leaves the user's infrastructure. Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive; additional sources are marked “Coming soon.” Integrations include TheHive, Keycloak, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks. Deployment options are Docker Compose, Kubernetes, and Helm. Poirot is open source under the MIT License, with Keycloak support for SSO and role-based access controls.

Good

  • Runs scheduled or on-demand scans.
  • Uses 38+ detection patterns and six validators.
  • Offers local Ollama-based classification.
  • Free and open source under the MIT License.

Watch out

  • Self-hosted deployment is required.
  • Additional data sources are marked “Coming soon.”

Who it suits

Poirot DSPM suits teams that want to scan data stores for sensitive information while self-hosting the tool. Its listed sources, integrations, and deployment options can help readers assess fit for their environment.

Verdict

Poirot DSPM offers self-hosted sensitive-data scanning with multiple detection and deployment options. Check whether its listed sources cover the systems you need to scan.

Plans and prices

From Poirot DSPM's own pricing page, checked 11 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Poirot DSPMFreeOpen source · Self-hosted · Free forever

The facts

Each one read from Poirot DSPM's own pages, with the date it was checked.

What it does

AI classification
Poirot offers local Ollama-based classification and says no data leaves the user's infrastructure.checked 11 Oct 2026
Confidence scoring
Findings receive a 0.0–1.0 confidence score based on validation results, context analysis, and pattern specificity.checked 11 Oct 2026
Data sources
Listed sources include MySQL, PostgreSQL, Oracle, AWS S3, Kafka, Google Drive, and OneDrive; additional sources are marked “Coming soon.”checked 11 Oct 2026
Deployment
The site lists Docker Compose, Kubernetes, and Helm deployment options.checked 11 Oct 2026
Detection
The site lists 38+ detection patterns covering API keys, database credentials, authentication tokens, private keys, PII, and custom regex patterns.checked 11 Oct 2026
Integrations
Listed integrations include TheHive, Keycloak, Ollama, PagerDuty, Slack, Microsoft Teams, SMTP email, and webhooks.checked 11 Oct 2026
License
The site says Poirot is open source under the MIT License.checked 11 Oct 2026
Purpose
Poirot scans databases, cloud storage, and message queues to detect API keys, secrets, PII, and other sensitive information.checked 11 Oct 2026
Scanning
It supports scheduled automated scans and on-demand scans.checked 11 Oct 2026
Security
The site describes Keycloak support for SSO and RBAC, including realm support, group mapping, and secure token validation.checked 11 Oct 2026
Support
The site provides an issue-reporting link and lists [email protected] as a contact address.checked 11 Oct 2026
Validation
Six post-match validators include Luhn, SSN, IBAN, entropy, Base58, and database password checks.checked 11 Oct 2026

Alternatives to Poirot DSPM

All alternatives
  1. 1

    Microsoft Defender for Business

    AndroidiOSAPImacOS
    7.5
    Visit
  2. 2

    Bedrock Data Security Platform

    Free planWebAPI
    7.2From $399 a month
    Visit
  3. 3Forcepoint Data Security Cloud logo

    Forcepoint Data Security Cloud

    AndroidiOSWebAPI
    6.8
    Visit
  4. 4

    Google Cloud Secret Manager

    Free planWeb
    6.5From $0.02 a month
    Visit
  5. 5Prisma Cloud SCA logo

    Prisma Cloud SCA

    WebAPI
    6.3
    Visit
  6. 6Palo Alto Networks Cortex Cloud API Security logo

    Palo Alto Networks Cortex Cloud API Security

    WebAPILinux
    6.2
    Visit