Canarytokens

iPhone + Android

9.2No. 1 of 18
in Honeypot Software
  • Recognised40% of the score83
  • Phone app26% of the score100
  • Documented20% of the score84
  • Free plan14% of the score100
Free plan
Yes
Runs on
Android, iPhone, self-hosted, Web, Windows

Summary

Canarytokens is ranked #1 of 18 in honeypot software on Samsung Mobile US Press. It runs on Android, iOS, Self-hosted, Web, Windows. There is a free plan.

Canarytokens plans and pricing

All plans
Canarytokens hosted service Free Tokens deployed through canarytokens.org are free docs.canarytokens.org · 28 Sept 2026

Compared on honeypot software

Free plan
Yescanarytokens.org
Deployment model
cloudcanarytokens.org
Decoy scope
multi-layercanarytokens.org
Credential lures
Yescanarytokens.org
Cloud decoys
Yescanarytokens.org

Facts

Purpose
Canarytokens are decoy tokens placed in networks, computers, and cloud environments to alert when accessed.docs.canarytokens.org · 28 Sept 2026
Setup
The hosted service lets users create tokens without installing software.docs.canarytokens.org · 28 Sept 2026
Alerts
Users can provide an email address when creating a token and receive an email when it is triggered.docs.canarytokens.org · 28 Sept 2026
Token types
Documented examples include HTTP, DNS, Windows directory, AWS API key, Kubernetes configuration, and WireGuard tokens.docs.canarytokens.org · 28 Sept 2026
Webhook alerts
Some tokens, including Kubeconfig and Sensitive Command, accept a webhook address for alerts.docs.canarytokens.org · 28 Sept 2026
Identity integrations
The Fake IdP SAML App token includes setup instructions for Microsoft Entra ID and Okta.docs.canarytokens.org · 28 Sept 2026
Phone use
The Fake App token is a Progressive Web App that alerts when opened and can include the device location if location access is allowed.docs.canarytokens.org · 28 Sept 2026
Browser support limit
The Fake App token currently supports Safari and Google Chrome.docs.canarytokens.org · 28 Sept 2026
Windows monitoring
The Sensitive Command token monitors execution of a specified command on Windows and requires importing its registry file with admin permissions.docs.canarytokens.org · 28 Sept 2026
Self-hosting
The maker publishes the Canarytokens server as open-source software and recommends installing it with Docker.github.com · 28 Sept 2026
Legacy token limit
The Slack API Token is deprecated, and new ones can no longer be created; existing tokens continue to work.github.com · 28 Sept 2026

Company

Headquarters
Cape Town, South Africacanarytokens.org · 28 Sept 2026

Best Canarytokens alternatives

See all 12

Where it ranks on Samsung Mobile US Press

Is Canarytokens yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources