Thinkst Canary

What Thinkst Canary is

Thinkst Canary emulates attractive network targets and alerts when someone interacts with them, helping organizations detect intruders. Canaries are available as hardware, virtual, cloud, or container deployments, and Thinkst describes deployment as taking under two minutes. Each customer gets a hosted management console for configuration, Canary management, and event handling. Alerts can be sent by email, text message, Slack, webhooks, or Syslog. The service includes unlimited Canarytokens, which act as tripwires and alert on interaction. Its API can manage configurations, alerts, users, tokens, and Flocks, with read-only, analyst, and admin key types. Listed integrations include Microsoft Sentinel, Google SecOps SOAR, Splunk, ServiceNow, and other security and operations tools. The annual bundle for five Canaries is $7,500 a year and includes deployment options, unlimited tokens, a hosted AWS Canary Console, support, maintenance, and updates for a year. Thinkst says consoles are single-tenant and Canaries send only information about triggered interactions. Docker Canaries lack several features, including IP stack fingerprinting and DNS over HTTPS support.