OpenCanary
A modular, low-resource network honeypot that mimics services to detect breaches and alert on attacker interactions.
What is OpenCanary?
OpenCanary is a modular, decentralized network honeypot that simulates multiple network services to detect and alert on malicious activity within internal networks. It helps security teams identify attackers who have breached perimeter defenses by luring them into interacting with fake services. The project is designed to be lightweight, extensible, and easy to deploy on various hardware.
Security engineers, system administrators, and DevOps teams responsible for monitoring and securing internal networks, especially those needing low-cost, customizable intrusion detection.
Developers choose OpenCanary for its open-source nature, low resource requirements, and flexibility compared to commercial alternatives. It offers a modular, Python-based architecture that can be easily extended and deployed on everything from Raspberry Pis to cloud VMs.
Overview
Modular and decentralised honeypot
Use Cases
Best For
- Detecting lateral movement by attackers inside a breached network
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
