The best Canarytokens alternatives

It suits security teams looking for decoys and investigation context across multiple protocols.

It suits administrators who want a self-hosted decoy for monitoring activity on a non-public network.

T-Pot suits users who can host and manage honeypot infrastructure and want multiple decoys with event dashboards and network monitoring.

Honeyd suits users creating host- or network-based honeypots, virtual honeynets, or network monitoring setups.

Cowrie is intended for security researchers, CERTs, and defenders who want to monitor SSH and Telnet activity.

Honeytrap suits users setting up self-hosted honeypots on Linux, including deployments that need centralized configuration or logging.

KFSensor suits Windows security teams that need honeypot-based intrusion detection, service emulation, and event integrations.

MedPot suits people who need to deploy an HL7 or FHIR honeypot on Linux in a self-hosted environment.

Dionaea suits Linux administrators and incident handlers who want to observe malware activity against network services.

Endlessh may suit administrators who want a self-hosted SSH tarpit on Linux.

Mailoney suits security teams and administrators who need a self-hosted SMTP decoy for observing attacks and credential attempts.

It suits security teams seeking decoy-based intrusion detection across hardware, virtual, cloud, or container deployments.

Conpot suits developers, ICS security researchers, and honeypot operators gathering information about industrial-control-system attacks.

Heralding suits Linux users who want to collect credentials in a self-hosted network honeypot.

The Platform is designed for enterprise organizations, including government, financial services, healthcare, telecoms, manufacturing, and critical…

DentiGrid is intended for MSSPs and enterprise SOC teams that need decoys, SIEM connections, and isolated tenant views.

ADBHoney suits security practitioners investigating activity against exposed Android Debug Bridge services.