16.6
Canarytokens are decoy tokens placed in networks, computers, and cloud environments to alert users when someone accesses them.
Free planAndroidiOSWeb
Alternatives to OpenCanary
OpenCanary is a free, self-hosted daemon that presents decoy network services and alerts when an attacker interacts with them. Its native modules cover protocols including SSH, HTTP, FTP, MySQL, Telnet and VNC. Alerts can include a source IP and indicate where a breach may have occurred; destinations include email, Syslog, webhooks and chat channels. A companion correlator can combine related events into a single email or SMS alert. Its low resource needs suit a Raspberry Pi…
26.2
Honeytrap is a free, open-source system for running, monitoring, and managing honeypots on self-hosted Linux deployments.
Free planLinuxSelf-hosted
36.2
KFSensor is a self-hosted Windows honeypot that detects intrusion attempts by simulating vulnerable services and trojans.
Windows
- 4
Thinkst Canary
Thinkst Canary emulates attractive network targets and alerts when someone interacts with them, helping organizations detect intruders.
WebAPILinuxmacOS6.2From $7,500 a year - 5
Honeyd
Honeyd is a free, self-hosted daemon for creating virtual network hosts and honeypots for threat detection, assessment, simulation, and monitoring.
Free planLinuxSelf-hostedWindows6.0Free plan - 6
MedPot
MedPot is a free, open-source honeypot that emulates HL7 and FHIR services.
Free planLinuxSelf-hosted6.0Free plan - 7
T-Pot
T-Pot is a free, self-hosted honeypot platform for running more than 20 honeypots across multiple architectures.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 8
Beelzebub
Beelzebub is a security platform that places decoys and canary credentials to help security teams spot attacker movement and investigate activity.
Free planAPILinuxSelf-hosted5.9Free plan - 9
Cowrie
Cowrie is a free, open-source SSH and Telnet honeypot for recording brute-force attempts and activity in attackers’ shell sessions.
Free planLinuxSelf-hosted5.8Free plan - 10
Dionaea
Dionaea is a self-hosted Linux honeypot designed to catch malware attempting to exploit network services, with the goal of obtaining a malware copy.
Free planLinuxSelf-hosted5.8Free plan - 11
Endlessh
Endlessh is a free, self-hosted SSH tarpit for Linux that slowly sends random banner text to keep unwanted SSH clients occupied.
Free planLinuxSelf-hosted5.8Free plan - 12
Heralding
Heralding is a free, self-hosted network honeypot for collecting credentials.
Free planLinuxSelf-hosted5.7Free plan - 13
Mailoney
Mailoney is a self-hosted SMTP honeypot that imitates a vulnerable mail server to detect and log access attempts, credential harvesting, and other SMTP attacks.
LinuxSelf-hostedWindows5.6 - 14
DentiGrid
WebAPISelf-hosted5.5 - 15
Conpot
Conpot is a free, open-source network honeypot for collecting intelligence about activity targeting industrial control systems.
LinuxSelf-hosted5.4 - 16
CounterCraft The Platform
CounterCraft The Platform uses deception technology to divert attackers from critical infrastructure and gather threat intelligence.
WebSelf-hosted5.3 - 17
ADBHoney
ADBHoney is a self-hosted, low-interaction honeypot for observing activity against Android Debug Bridge services exposed over TCP/IP.
Self-hosted5.2 - 18
TANNER
WebLinux4.7 - 19
Glutton
Linux4.4 - 20
SNARE
Linux4.4