Breaking News: The Shai-Hulud npm Malware Returns With 320+ Affected Packages
What BI tools are running in your environment

Too Good To BI True

How Free BI Tools Became the Shortcut to Your Company’s Crown Jewels

If your security team doesn’t know what BI tools are running in your environment, this report is for you.

OX Security researchers analyzed 5 of the most widely deployed open-source Business Intelligence platforms. Every single one failed and led to a full exploitation chain — reaching data that should never have been accessible.

Inside the report:

    • Why open-source BI tools are among the shortest paths to your organization’s most sensitive data
    • A full vulnerability breakdown across Metabase, DataEase, Pentaho, Redash, and Apache Superset — including 3 new zero-day discoveries
    • What attackers can access when these tools go unmonitored — and how easily they get there
    • What security teams need to ask right now about their own environments

By the numbers: 

45,000+ Publicly exposed instances across the five platforms analyzed. 

7 Vulnerabilities documented — 4 of them zero-days.

5 Platforms reviewed. 5 platforms failed. 

1 thing in common: Every exploitation chain led to full system compromise.

 

Download the eBook

Setting the standard for devops and security teams

"The OX Security platform is a game changer for application security teams. It is easy to adopt and integrate into the CI/CD pipeline and provides us the visibility and focus we need to develop fast and secure."
Moshe Belostosky
Director of Infrastructure at Tomorrow.io
"OX Security supports our need for transparency and end to end traceability, ensuring security throughout our processes. This provides us with greater control - blocking vulnerabilities and improving accuracy during the development lifecycle."
Danny Wishlitzky
Head of IT and Cybersecurity, CISO, DPO, Proximity
OX is changing the software supply chain security game. It gives a complete and reliable snapshot of code security before deployment
Golan Barash
CISO at 888 holdings