Know what's actually wrong with your Odoo's security posture
A standalone security dashboard that scans your own database on a schedule and turns what it finds into a plain, prioritised list - no AI, no external service, nothing leaves your instance.
What this module checks
Repeated failed logins against one account, failed logins spread across many accounts from one address, a session timeout left longer than a day, and how many users still sign in without two-factor authentication.
How many accounts hold full Administrator access, and which of those have gone quiet for 90+ days - a privileged credential nobody is watching is pure downside if it ever leaks.
A checklist of settings that are commonly left at an insecure default: no minimum password length, open self-registration, and a system URL that is not HTTPS.
Unusually large data exports in a 24-hour window, portal/external accounts that unexpectedly hold internal access, and the total count of attachments reachable without logging in.
Enforcement, not just detection: File Type Policies
Create a policy naming any file extensions you want blocked - not a fixed preset, any extension you choose - and every upload anywhere in Odoo that matches (chatter, Documents, imports) is rejected on the spot and logged to Blocked Files. A user who keeps hitting the block repeatedly is itself flagged as a finding. Ships with one example policy, inactive by default, so installing the module never starts rejecting uploads on its own - you turn it on when you're ready.
A finding is a real record, not a one-off report
Every finding is persisted with a severity, a plain-English description of what was found and why it matters, and a status: Open, Acknowledged, Resolved, or Ignored. The same finding is re-touched on every scan instead of creating duplicates, and it auto-resolves once the underlying condition genuinely clears - no manual cleanup, and nothing silently disappears just because you closed the dashboard.
In practice
Quick start
- Install the module - it appears under Security Monitor in your Apps menu.
- Open Security Monitor > Dashboard to see findings grouped by category and severity.
- Wait for the hourly scan, or a Manager can click Run Security Scan Now from the Findings list.
- Acknowledge, resolve, or ignore each finding as you address or accept it.
Requirements
- Odoo 18.0, Community or Enterprise.
- No external services, API keys, or additional Python packages.
Support
Email support@bithost.in or visit www.bithost.in. For implementation or licensing enquiries, contact sales@bithost.in.
© Zhost Consulting Private Limited. Bithost Security Monitor is proprietary, commercially licensed software - see LICENSE.txt in the module package for full terms. Not developed, endorsed, certified, or maintained by Odoo S.A. "Odoo" is a trademark of Odoo S.A., used here only to describe compatibility.
Bithost Security Monitor: Visibility, Control, and Hardening
Turn security findings into actionable workflows with clear prioritization, remediation accountability, and auditable posture tracking.
Module Focus
- Detect and classify security findings with operationally meaningful severity.
- Track remediation responsibilities and closure evidence over time.
- Support governance reviews with explainable, persistent security records.
Expected Business Outcomes
Risk Reduction
Surface the highest-impact exposures before they become incidents.
Compliance Support
Generate cleaner evidence for internal and external audits.
Control Maturity
Move from ad-hoc checks to repeatable security operations.
Additional Store Screens
Store reference screenshot 1.
Store reference screenshot 2.
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 3628 |
| Technical Name |
bithost_security |
| License | OPL-1 |
| Website | https://www.bithost.in |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module