Too Good To BI True

How Free BI Tools Became the Shortcut
to Your Company's Crown Jewels
Frame 2085669006

Get the eBook

If your security team doesn’t know what BI tools are running in your environment, this report is for you.

OX Security researchers analyzed 5 of the most widely deployed open-source Business Intelligence platforms. Every single one failed and led to a full exploitation chain — reaching data that should never have been accessible.

Inside the Report:

Open-source BI vulnerabilities

Why open-source BI tools are among the shortest paths to your organization's most sensitive data.

Full vulnerability breakdown

A full vulnerability breakdown across Metabase, DataEase, Pentaho, Redash, and Apache Superset — including 3 new zero-day discoveries.

Attack patterns uncovered

What attackers can access when these tools go unmonitored — and how easily they get there.

Security recommendations

What security teams need to ask right now about their own environments.

By the numbers:

45,000+ Publicly exposed instances across the five platforms analyzed.

7 Vulnerabilities documented — 4 of them zero-days. 

5 Platforms reviewed. 5 platforms failed.

1 thing in common: Every exploitation chain led to full system compromise.

"The OX Security platform is a game changer for application security teams. It is easy to adopt and integrate into the CI/CD pipeline and provides us the visibility and focus we need to develop fast and secure."

Moshe Belostosky Director of Infrastructure at

"OX Security supports our need for transparency and end to end traceability, ensuring security throughout our processes. This provides us with greater control - blocking vulnerabilities and improving accuracy during the development lifecycle."

Danny Wishlitzky Head of IT and Cybersecurity, CISO, DPO, Proximity

OX is changing the software supply chain security game. It gives a complete and reliable snapshot of code security before deployment

Golan Barash CISO at 888 holdings

Change the trajectory of your entire AppSec program today

A unified platform that uses environment-aware context to prioritize risks saves

Get a Demo