# thinkst/opencanary

Modular and decentralised honeypot

Repository: https://github.com/thinkst/opencanary
Canonical: https://ross.abutalabs.com/products/opencanary
Homepage: http://opencanary.org
Language: Python
License: BSD-3-Clause
License Family: permissive
Last push: 2026-08-18T16:42:37+00:00

## Health v2 (maintenance only)
Score: 86/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 98, release rhythm 62, longevity 100
- inputs: {"age_days": 4046, "days_push": 15, "days_rel": 42, "gap_med": 183.0, "n_releases_24m": 5}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3003, forks 410 (observed 2026-08-28T04:07:37.530247+00:00)

## What it is
OpenCanary is a modular, multi-protocol network honeypot daemon written in Python, designed to detect attackers after they breach internal networks. It emulates common services and sends alerts through various channels when intruders interact with it.

## Use cases
- detect attackers inside my internal network
- set up a honeypot on a raspberry pi
- get alerted when someone scans or breaches my network
- deploy decoy services to catch intruders
- low-resource intrusion detection for a small network
- emulate ssh, http, and samba services as traps

## When to choose
- you want a lightweight, low-resource honeypot that runs on a Pi or small VM
- you need multi-protocol deception with configurable alerting
- you want an open-source alternative to Thinkst Canary
- you prefer a modular, extensible Python honeypot

## When to avoid
- you need full network-wide IDS/IPS rather than deception-based detection
- you require Windows-native honeypot features
- you need high-interaction honeypots with full OS emulation

## Facets
- artifact type: service
- maturity: active
- function: monitoring, alerting, security
- domain: security, networking, self-hosted
- platform: python, self-hosted
- tags: honeypot, intrusion-detection, deception, breach-detection, network-security, linux, macos, docker

## Member repositories
- thinkst/opencanary (main) score 86

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:37.530247+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:47:24.721730+00:00, confidence not recorded.
  - readme: https://github.com/thinkst/opencanary (fetched 2026-08-28T04:07:37.530247+00:00, sha efee0a3b7efc)
  - registry_pypi: https://pypi.org/pypi/opencanary/json (fetched 2026-08-29T09:46:20.100390+00:00, sha cad7f2abbc69)
- Data as of 2026-08-30T08:39:29.467469+00:00.