Skip to content

Canary Tokens

SIEM & Threat Detection

A lightweight, multi‑protocol network honeypot that alerts you when attackers interact with it after breaching internal networks.

Python Latest v0.9.9 · 4d ago Security brief →

Features

  • Mimics multiple network services to lure and detect attacker activity
  • Generates real‑time alerts showing the source IP and compromised service

Recent releases

View all 3 releases →
Upgrade now
v0.9.9 Security relevant
Breaking upgrade Dependencies

MongoDB DoS fix

Upgrade now
v0.9.8 New feature
Dependencies

MongoDB module + pytest migration

v0.9.7 Bug fix

Fixes TFTP client handling and Docker startup issues.

Full changelog

What's Changed

  • Fix TFTP client attacks without generating event issues by @H-Dynamite in https://github.com/thinkst/opencanary/pull/411
  • Fix docker startup failure due to dangling twistd.pid file by @jayjb in https://github.com/thinkst/opencanary/pull/423
  • Change base image to python:3.10-bookworm by @imTHAI in https://github.com/thinkst/opencanary/pull/422

New Contributors

  • @H-Dynamite made their first contribution in https://github.com/thinkst/opencanary/pull/411
  • @imTHAI made their first contribution in https://github.com/thinkst/opencanary/pull/422

Full Changelog: https://github.com/thinkst/opencanary/compare/v0.9.6...v0.9.7

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,924
Forks
403
Languages
Python CSS HTML

Install & Platforms

Install via
pip
Platforms
linux macos arm64

Alternative to

Thinkst Canary

Beta — feedback welcome: [email protected]