thinkst/opencanary

Health v2 · maintenance only

Adoption not part of the score

3003 stars · 410 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OpenCanary is a modular, multi-protocol network honeypot daemon written in Python, designed to detect attackers after they breach internal networks. It emulates common services and sends alerts through various channels when intruders interact with it.

Use cases

• detect attackers inside my internal network
• set up a honeypot on a raspberry pi
• get alerted when someone scans or breaches my network
• deploy decoy services to catch intruders
• low-resource intrusion detection for a small network
• emulate ssh, http, and samba services as traps

When to choose

• you want a lightweight, low-resource honeypot that runs on a Pi or small VM
• you need multi-protocol deception with configurable alerting
• you want an open-source alternative to Thinkst Canary
• you prefer a modular, extensible Python honeypot

When to avoid

• you need full network-wide IDS/IPS rather than deception-based detection
• you require Windows-native honeypot features
• you need high-interaction honeypots with full OS emulation

Facets

service · maturity active

monitoring alerting security security networking self-hosted python self-hosted honeypot intrusion-detection deception breach-detection network-security linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="thinkst/opencanary")