
DentiGrid
5.5#15 in honeypot softwareWebAPISelf-hosted
Visit
| Fact | DentiGrid | OpenCanary |
|---|---|---|
| Alert details | Alerts can include the origin IP, process tree, and target node, and can be sent to SOC webhooks. | Alerts can identify the threat source IP address and where the breach may have occurred. |
| Deployment | Dectrax says DentiGrid deploys agentlessly in under five minutes using RMM, Microsoft Intune, Jamf, or Ansible tooling. | The project documents installation on Ubuntu and macOS, plus Docker deployment on Linux hosts using host networking. |
| Purpose | DentiGrid is a SIEM-native honeypot platform for MSSPs and enterprise SOC teams that uses decoy assets to detect adversary activity. | OpenCanary is a multi-protocol network honeypot intended to detect attackers interacting with services on non-public networks. |
| Support | Dectrax says commercial licenses include the multi-tenant management portal, telemetry processing pipelines, SIEM connectors, and SLA-backed technical support. | Bug reports are requested through GitHub, security vulnerabilities through the project security policy, and feature requests through the project tracker. |
You want what its maker publishes above — check its page for the details.
It suits administrators who want a self-hosted decoy for detecting interactions with network services. Linux provides the widest module options; macOS lacks SMB monitoring, and portscan monitoring is limited to Linux and disabled in Docker.