T-Pot

C
C tier on Honeypot SoftwareScore 5.8 · #9 of 18
Android app
Not listed
Free plan
Yes
Runs on
Linux, Mac, self-hosted, Windows
github.com
The T-Pot homepage

Summary

T-Pot is ranked #9 of 18 in honeypot software on Everything Xiaomi. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.

T-Pot plans and pricing

All plans
T-Pot Free open source · self-hosted · hardware and network requirements apply github.com · 4 Oct 2026

Compared on honeypot software

Free plan
Yesgithub.com
Deployment model
self-hostedgithub.com
Decoy scope
multi-layergithub.com

Facts

Purpose
T-Pot is an all-in-one, optionally distributed honeypot platform supporting multiple architectures and more than 20 honeypots.github.com · 4 Oct 2026
Analysis stack
It uses Elasticsearch to store events, Logstash to ingest and send them, and Kibana to display dashboards.github.com · 4 Oct 2026
Network monitoring
Included network security monitoring tools include Fatt, P0f, and Suricata.github.com · 4 Oct 2026
Visualization and tools
Included tools include an animated attack map, CyberChef, Elasticvue, and Spiderfoot.github.com · 4 Oct 2026
Deployment
T-Pot supports standalone and distributed deployments, including hive and sensor installation types.github.com · 4 Oct 2026
Operating systems
The project documents supported Linux distributions and says macOS and Windows use Docker Desktop with a limited feature set.github.com · 4 Oct 2026
Hardware requirements
The project recommends 16 GB RAM and a 256 GB SSD for a hive, or 8 GB RAM and a 128 GB SSD for a sensor.github.com · 4 Oct 2026
Data sharing
By default, data is submitted to Sicherheitstacho, and the project says this can be disabled by removing the ewsposter section from the configuration.github.com · 4 Oct 2026
Security considerations
The project warns that compromise cannot be ruled out and says honeypots should not contain sensitive data.github.com · 4 Oct 2026
Vulnerability reporting
The security policy asks reporters to identify the affected component, provide reproduction details, and check whether the issue is known upstream.github.com · 4 Oct 2026
Support
T-Pot is provided as-is without a support commitment; users can report issues and ask general questions through GitHub Issues and Discussions.github.com · 4 Oct 2026
Retention
Log persistence defaults to 30 cycles and the default Elasticsearch index policy keeps indices for 30 days; both can be adjusted.github.com · 4 Oct 2026
LLM honeypots
The Beelzebub and Galah honeypots require Ollama, while ChatGPT support is described as untested with T-Pot.github.com · 4 Oct 2026

Best T-Pot alternatives

See all 12

Where it ranks on Everything Xiaomi

Is T-Pot yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources