OpenCanary
A lightweight multi-protocol honeypot daemon that alerts when someone touches fake network services.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About OpenCanary
OpenCanary is a modular, decentralised network honeypot from Thinkst, the company behind Thinkst Canary. It runs fake services on a machine in your network, and because nobody legitimate should connect to them, any access is a strong sign of an intruder or a misbehaving device, and it raises an alert.
It is written in Python and can run as a systemd service or in Docker using the provided compose file. It suits administrators who want cheap early warning of activity inside a network.
Strengths
- Emulates many network protocols
- Low false-positive alerting on internal networks
- Docker and systemd setups included
Limitations
- Needs configuration and a place to send alerts
- Detects intrusions but does not block them
Details
- Pricing
- FreeFree and open source.
- License
- BSD-3-Clause
- Developer
- Thinkst
- Platforms
- Linux, Self-hosted
- How it runs
- Self-hosted
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Administrators who want early warning of intruders on an internal network
- Categories
- Network tools, Security tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to OpenCanary
Compare allSoftware that can replace OpenCanary for an important use case, and what changes if you switch.
Canarytokens
A free web tool that creates tripwire tokens which alert you when an attacker triggers them.
Canarytokens is a free hosted tool that creates tripwire tokens alerting when triggered, with nothing to install unlike OpenCanary's daemon.
T-Pot
An all-in-one multi-honeypot platform with dashboards for analysing collected attack data.
T-Pot is an all-in-one multi-honeypot platform with dashboards, needing a dedicated machine with more resources than a lightweight OpenCanary daemon.
Similar software
Related functionality, not necessarily a direct replacement.