tirreno

tirreno is an open-source security platform. It monitors and protects your web app from cyberfraud, account threats, fake accounts, and abuse. Unlike classic SIEMs that focus on infrastructure, tirreno monitors your users to detect threats where they actually happen — inside your app.

• For web applications: Protect your user areas from account takeovers, brute-force attacks, fake accounts, malicious bots, and common web vulnerabilities caused by user behavior.
• For online platforms: Conduct thorough merchant risk assessments to identify and mitigate potential threats from high-risk merchants, ensuring the integrity of your platform.
• For startups, SaaS, and e-commerce: Get a ready-made boilerplate for account security, including monitoring customer activity for suspicious behavior and preventing fraud using advanced email, IP address, and phone reputation checks.
• For online communities: Combat spam, prevent fake registrations and account sharing.

tirreno is a "low-tech" PHP and PostgreSQL software application that can be downloaded and installed on your own web server. After a straightforward five-minute installation process, you can immediately access real-time threat analytics.

Online demo

Check out the online demo at play.tirreno.com (admin/tirreno).

Requirements

• PHP: Version 8.0 to 8.3
• PostgreSQL: Version 12 or greater
• PHP extensions: PDO_PGSQL, cURL
• HTTP web server: Apache with mod_rewrite and mod_headers enabled
• Operating system: A Unix-like system is recommended
• Minimum hardware requirements:
  • PostgreSQL: 512 MB RAM (4 GB recommended)
  • Application: 128 MB RAM (1 GB recommended)
  • Storage: Approximately 3 GB PostgreSQL storage per 1 million events

Quickstart install

1. Download the latest version of tirreno (ZIP file).
2. Extract the tirreno-master.zip file to the location where you want it installed on your web server.
3. Navigate to http://your-domain.example/install/index.php in a browser to launch the installation process.
4. After the successful installation, delete the install/ directory and its contents.
5. Navigate to http://your-domain.example/signup/ in a browser to create administrator account.
6. For cron jobs setup insert the following schedule (every 10 minutes) expression with crontab -e command or by editing /var/spool/cron/your-web-server file:

*/10 * * * * cd /path/to/tirreno && /usr/bin/php /path/to/tirreno/index.php /cron >> /path/to/tirreno/logs/error.log 2>&1

Using a docker-based installation (optional)

To run tirreno within docker container you may use image published on dockerhub.

docker pull tirreno/tirreno:latest

Documentation

See the User Guide for details on how to use tirreno.

Optional non-free capabilities

The open-sourced tirreno code is intended to be used for free as a standalone application. It provides general statistics, rule engine and risk-based alerting to a monitored system. As is, this tooling may be sufficient for bringing insights about user activity and behavioral patterns in a wide range of use cases, especially as a solution for small and medium-sized organizations.

However, if you are looking to cover more advanced usage scenarios, such as cyber fraud prevention, the additional tirreno API enrichment capabilities can be enabled via monthly-paid subscription. It supplies extended information on any of the following: IP address, email address, domain, and phone number. Enabling all the data enrichment types augments tirreno into a fully-fledged enterprise solution for an online fraud prevention system.

About

The tirreno project started as a proprietary system in 2021 and was open-sourced (AGPL) in December 2024.

Behind tirreno is a blend of extraordinary engineers and professionals, with over a decade of experience in online business operations. We solve real people's challenges through love in ascétique code and sovereign technologies.

tirreno is not VC-motivated. Our inspiration comes from the daily threats posed by organized cybercriminals, driving us to reimagine protection that has never existed before.

The tirreno wordmark stands beyond the horizon line, as a metaphor for the evolutionary cycle of the threat landscape, and our commitment to stay ahead of it.

Why the name tirreno?

History suggests that the Tyrrhenian people may have lived in Tuscany and eastern Switzerland as far back as 800 BC. The term "Tyrrhenian” became more commonly associated with the Etruscans, and it is from them that the Tyrrhenian Sea derives its name — a name still in use today. This name is believed to be an exonym, possibly meaning “tower”.

While working on the logo, we conducted our own historical study and traced mentions of 'tirreno' back to the 15th-century printed edition of the Vulgate (the Latin Bible). We kept it lowercase to stay true to the original — quite literally, by the book.

The tirreno wordmark, positioned beyond a horizon line, as a metaphor for the constant evolution of the fraud landscape and our commitment to staying ahead of change.

Links

• Website
• Live demo
• Documentation
• Mattermost community

Reporting a security issue

If you've found a security-related issue with tirreno, please email security@tirreno.com. Submitting the issue on GitHub exposes the vulnerability to the public, making it easy to exploit. We will publicly disclose the security issue after it has been resolved.

After receiving a report, tirreno will take the following steps:

• Confirm that the report has been received and is being addressed.
• Attempt to reproduce the problem and confirm the vulnerability.
• Release new versions of all the affected packages.
• Announce the problem prominently in the release notes.
• If requested, give credit to the reporter.

License

This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License (AGPL) as published by the Free Software Foundation version 3.

The name "tirreno" is a registered trademark of tirreno technologies sàrl, and tirreno technologies sàrl hereby declines to grant a trademark license to "tirreno" pursuant to the GNU Affero General Public License version 3 Section 7(e), without a separate agreement with tirreno technologies sàrl.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License along with this program. If not, see GNU Affero General Public License v3.

Authors

tirreno Copyright (C) 2025 tirreno technologies sàrl, Vaud, Switzerland. (License AGPLv3)