Your Odoo instance is vulnerable to admin account takeover. The timeline shows clusters of admin logins from new countries within minutes.

All expired tokens revoked and unique per IP. No token reuse detected across IPs after expiry.

Your Odoo instance is vulnerable to session hijacking. Duplicate session IDs detected across ASNs within 10 minutes.

Browser fingerprints consistent per user. No browser change patterns indicating session takeover.

Your Odoo instance is vulnerable to privilege escalation. Unapproved role escalation detected on multiple days.

No high-risk actions post escalation. All post-escalation activities are within normal parameters.

Your Odoo instance is vulnerable to credential stuffing. Brute-force bursts observed with >15 failed logins followed by success.

IPs below threshold. No repeated failed logins from same device detected.

Your Odoo instance is vulnerable to vendor bank tampering. Payment approved after recent bank change within 48 hours.

Unique bank accounts per vendor. No shared bank accounts detected across multiple vendors.

Your Odoo instance is vulnerable to duplicate invoicing. Near-duplicate invoices found with same amounts within 30 days.

All invoices 3-way matched. No PO-bypass invoices detected.

Your Odoo instance is vulnerable to refund abuse. One device dominates refunds with suspiciously high ratio.

Refunds during working hours. No late-night refund bursts detected.

Your Odoo instance is vulnerable to employee-vendor collusion. Dense pairing network detected with frequent approvals between same pairs.

Distinct device IDs. No shared fingerprint detected between employees and vendors.

Your Odoo instance is vulnerable to ghost stock adjustments. After-midnight spikes detected with repeated negative adjustments.

All linked to transfers. No unlinked stock entries detected.

Your Odoo instance is vulnerable to price manipulation. Abrupt margin drops detected in Home category exceeding 10%.

All changes approved. No unauthorized change logs detected.

Your Odoo instance is vulnerable to supplier onboarding fraud. Concentrated registrations detected from same IP/device.

Unique supplier strings. No synthetic duplicates detected.

Your Odoo instance is vulnerable to brute-force attacks on /jsonrpc. Parallel error spike detected with high volume.

UA patterns diverse. No identical scripted UAs detected.

Your Odoo instance is vulnerable to webhook spoofing. Unverified payloads detected with missing HMAC signatures.

0 replays detected. No replay attempts found.

Your Odoo instance is vulnerable to OAuth token misuse. Cross-geo usage detected with same refresh token from different locations.

Revoked tokens invalid. No old tokens found active after revocation.

Your Odoo instance is vulnerable to debug mode exposure. Debug requests served to external IPs.

No db-name params detected. Database names not exposed in URLs.

Your Odoo instance is vulnerable to audit trail deficiency. Missing audit logs detected on key models.

Attachments logged. All file operations properly tracked.

Your Odoo instance is vulnerable to CVE exposure. Outdated modules detected with known vulnerabilities.

No deprecated packages detected. All dependencies are up to date.

Your Odoo instance is vulnerable to over-permissive access rules. Wide write rights detected across critical models.

Clean inheritance detected. No nested conflicts found in access rules.