EVERYTHING XIAOMI
Get listed

MedPot

MedPot is a free, open-source honeypot that emulates HL7 and FHIR services.

Place
#7 of 21
Score
6.0
MedPot's website

What MedPot is

MedPot is a free, open-source honeypot that emulates HL7 and FHIR services. It is intended to run on Linux in a self-hosted setup, acting as an application-level decoy. The project documents running it with Go or a script, compiling a binary, and building a Docker container; installation requires Go 1.17 or newer. By default, it listens on port 2575 and writes logs to /var/log/medpot.log, with command-line options to change both locations. Templates and configuration files are stored in /etc/medpot/. Example log records include a timestamp, port, IP address, message, level, and captured data. An additional command-line option chooses between two boot logos. Docker is listed as a deployment option, and the README does not list other product integrations. The project does not identify a narrower target audience than users seeking an HL7/FHIR honeypot. Its README does not specify support terms, security certifications, or compliance standards.

Good

  • Free and open source.
  • Emulates HL7 and FHIR services.
  • Supports binary and Docker deployment.
  • Port and log location can be changed.
  • Logs include connection details and captured data.

Watch out

  • Requires Go 1.17 or newer.
  • Self-hosted Linux deployment.
  • README specifies no support terms or certifications.

Who it suits

MedPot is for users who need a self-hosted decoy emulating HL7 and FHIR services. Its setup requirements and runtime options suit people comfortable running Go-based software or building a Docker container.

Verdict

MedPot provides a configurable HL7/FHIR honeypot with documented Go and Docker deployment paths. Its README leaves support and security certification details unspecified, so those needs require separate consideration.

Plans and prices

From MedPot's own pricing page, checked 8 Oct 2026.

All about pricing
PlanPriceWhat it gives you
MedPotFreeOpen-source repository; Go 1.17 or newer required

The facts

Each one read from MedPot's own pages, with the date it was checked.

What it does

Captured connection data
The README's example log entry includes a message, time, port, IP address, and encoded data.checked 4 Oct 2026
Configuration
Templates and configuration files are located at /etc/medpot/.checked 8 Oct 2026
Container
The installation instructions include a script to build a Docker container.checked 8 Oct 2026
Customization
A command-line argument lets users choose between two boot logos.checked 4 Oct 2026
Default port
By default, MedPot attempts to bind and listen on port 2575.checked 8 Oct 2026
Go requirement
Installation requires Go 1.17 or newer.checked 4 Oct 2026
Installation
The project requires Go 1.17 or newer and provides instructions to run it or compile it into a binary.checked 8 Oct 2026
Integrations
The maker's README documents Docker as a deployment option and does not list other product integrations.checked 4 Oct 2026
Intended use
The project describes MedPot as an HL7/FHIR honeypot; it does not specify a narrower target audience.checked 4 Oct 2026
Intended users
The project describes itself as an HL7 / FHIR honeypot; its README does not specify a narrower user group.checked 8 Oct 2026
Log data
The README's example log record includes a timestamp, port, IP address, message, level, and captured data.checked 8 Oct 2026
Logging
The README gives /var/log/medpot.log as the default log file location and says it can be changed with the -sll flag.checked 8 Oct 2026
Purpose
MedPot is a honeypot that emulates HL7 / FHIR.checked 8 Oct 2026
Run and build
The README documents running MedPot with Go or a script, compiling it into a binary, and building a Docker container.checked 4 Oct 2026
Runtime options
Supported arguments include options to select a boot logo, change the listening port, and change the log location.checked 8 Oct 2026
Support and security details
The repository README does not specify support terms, security certifications, or compliance standards.checked 4 Oct 2026

Alternatives to MedPot

All alternatives
  1. 1Canarytokens logo

    Canarytokens

    Free planAndroidiOSWebSelf-hosted
    6.6Free plan
    Visit
  2. 2

    OpenCanary

    Free planLinuxmacOSSelf-hosted
    6.5Free plan
    Visit
  3. 3

    Honeytrap

    Free planLinuxSelf-hosted
    6.2Free plan
    Visit
  4. 4

    KFSensor

    Windows
    6.2From $120 a year
    Visit
  5. 5Thinkst Canary logo

    Thinkst Canary

    WebAPILinuxmacOS
    6.2From $7,500 a year
    Visit
  6. 6

    Honeyd

    Free planLinuxSelf-hostedWindows
    6.0Free plan
    Visit