Skip to content
OpenDRP
GitHub
Self-Hosted Digital Risk Protection Platform

Complete Digital Risk Visibility Under Full Data Sovereignty

OpenDRP empowers security teams to monitor look-alike phishing domains, brand keywords, and credential breach leaks — keeping sensitive inventory strictly within your infrastructure.

View Repository on GitHub Join Telegram Group
FastAPI & React SPA Stateless Connectors Docker Compose Ready TOTP MFA & RBAC

Core Capabilities

Built for Security Teams & CISOs

Phishing & Brand Protection

Detect typosquatting and look-alike domains with the dnstwist connector, and with optional shodan and netlas connectors for certificates, page titles and favicons. Brand keywords are monitored as assets.

Breach Intelligence

Checks monitored email accounts and domains against Have I Been Pwned (HIBP). Breach findings resolve to the matching asset, and domain lookups use HIBP's domain verification.

Core + Connector Architecture

The FastAPI core owns state, authorization, validation, deduplication, scheduling, alerts and audit logs. Each data source runs as an independent connector container that talks to the core over HTTP, with its own revocable token.

DNS Security

DNS records, registration expiry (RDAP), certificate transparency logs, live TLS probes and VirusTotal or Shodan evidence. Observed hosts can be promoted to assets after review, and certificates are checked for appearances on foreign addresses.

Alerts, Reports and Schedules

Email and Telegram alerts for new findings, retried independently per channel and recipient. Asynchronous PDF reports, UTC scan schedules, and expiry reminders for domains and certificates.

Access Control and Audit

Roles for admin, analyst and viewer. TOTP two-factor authentication, refresh-token rotation and login rate limiting. Structured JSON audit events for every sign-in, asset change and scan, ready for Elastic Security.

Operations and Extensibility

Prometheus metrics at /api/v1/metrics, nightly retention sweeps, and make backup with restore checks in CI. New sources register as data through the modules API, without changing the core.

Architecture

Core and Connectors

Connectors

dnstwist Look-alike domains
Shodan & Netlas Certificates, titles, favicons
Have I Been Pwned Breach leaks
VirusTotal & RDAP DNS evidence and expiry

Core

FastAPI backend

  • State and asset inventory
  • Authorization (RBAC, TOTP MFA)
  • Validation and deduplication
  • Scheduling and reports
  • Alerts and audit logs

Infrastructure

PostgreSQL 17 Primary data store
Redis Cache and coordination
React SPA Web interface

Each connector runs as an independent container. New data sources register through the modules API, so the core does not change when a source is added.

Deploy in Minutes

Simple Self-Hosted Setup

bash — docker compose deployment 
# 1. Clone the repository
git clone https://github.com/OpenDRP/opendrp.git
cd opendrp

# 2. Run automated setup wizard (generates CSPRNG secrets)
python setup.py

# 3. Spin up PostgreSQL 17, Redis, FastAPI backend & React SPA
make up

Requires Docker Engine with Compose v2.24+. Production environment enforces pinned releases, MFA for admins, and encrypted settings at rest.

Deployment guide Production setup and verification API reference Routes, methods and required roles Security model What is enforced and what operators verify