​
Overview

The DigitalOcean integration monitors your cloud infrastructure: Droplets, managed databases, block storage volumes, firewalls, Kubernetes clusters, and load balancers. LowerPlane uses read-only access via the DigitalOcean API v2 with OAuth 2.0.

​
How to Connect

1

Navigate to Integrations

Go to Settings > Integrations in LowerPlane.
2

Select DigitalOcean

Find DigitalOcean under Cloud Providers and click Connect.
3

Authorize with DigitalOcean

You will be redirected to DigitalOcean. Sign in and review the requested permissions.
4

Grant Access

Click Authorize application to grant LowerPlane read-only access to your account.
5

Initial Sync

LowerPlane syncs your Droplets, databases, volumes, firewalls, and Kubernetes clusters. This typically takes 1-3 minutes.

​
Permissions Requested

LowerPlane requests the read OAuth scope, which provides read-only access to:
LowerPlane uses read-only access. It cannot create, modify, or delete any resources in your DigitalOcean account.

​
What LowerPlane Collects

Droplet Inventory

All Droplets with metadata: name, region, size, status, public/private IPs, VPC assignment, backup and monitoring status.

Firewall Coverage

Cloud Firewall rules and which Droplets have firewalls attached, identifying unprotected instances.

Database Security

Managed database clusters with encryption at rest status, backup configuration, and SSL enforcement.

Volume Encryption

Block storage volumes with encryption at rest verification.

Monitoring Alerts

CPU utilization alert policies and which Droplets have monitoring configured.

Kubernetes Clusters

Kubernetes cluster configuration, node pools, and version information.

​
Security Tests

LowerPlane runs automated tests against your DigitalOcean resources:

​
Compliance Mapping

​
Troubleshooting

Ensure you are signing in with an account that has owner or admin access to the DigitalOcean team. Member accounts may not have permission to authorize third-party applications.
LowerPlane syncs all Droplets accessible to the authenticated account. If you are part of multiple teams, only the team you authorized during OAuth will be synced. Connect each team separately.
A Droplet is marked as unprotected if it has no Cloud Firewall assigned. Note that DigitalOcean Cloud Firewalls are separate from OS-level firewalls (iptables/ufw) — LowerPlane checks Cloud Firewalls only.