Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 3 Oct 2026

Heralding

Ch 086.8of 18 Honeypot Software
  1. 1Runs onLinux, self-hosted
  2. 2CostsFree plan
  3. 3Deployment modelself-hosted
  4. 4Decoy scopenetwork
  5. 5Credential luresYes
5 lines stated Written from the maker's own pages: github.com
Visit site Alternatives
The Heralding homepage

Overview

Heralding is ranked #8 of 18 in honeypot software on Specifiction. It runs on Linux, Self-hosted. There is a free plan.

Heralding plans and pricing

All plans
Heralding Free GPL-3.0 licensed open-source honeypot github.com · 3 Oct 2026

Compared on honeypot software

Free plan
Yesgithub.com
Deployment model
self-hostedgithub.com
Decoy scope
networkgithub.com
Credential lures
Yesgithub.com

Facts

Purpose
Heralding is a simple honeypot that collects credentials.github.com · 3 Oct 2026
Protocols
It supports FTP, Telnet, SSH, HTTP, HTTPS, POP3, POP3S, IMAP, IMAPS, SMTP, VNC, PostgreSQL and SOCKS5.github.com · 3 Oct 2026
Authentication capture
The auth log records usernames and plaintext passwords when the protocol makes them available.github.com · 3 Oct 2026
Session logs
It writes authentication attempts, session summaries and complete session data to CSV and JSON Lines files.github.com · 3 Oct 2026
Session details
Session data can include timestamps, duration, source and destination IP and port, protocol, authentication attempts and protocol-specific auxiliary data.github.com · 3 Oct 2026
Log timing
Session log entries are written after a session ends, while auth log entries appear when a password has been transmitted.github.com · 3 Oct 2026
Installation
The README gives pip installation instructions and describes running Heralding on a Debian-based system.github.com · 3 Oct 2026
Container deployment
The project README describes building a Docker image and running it with a port mapping.github.com · 3 Oct 2026
Requirements
The README states that Python 3.7.0 or higher is required.github.com · 3 Oct 2026
Packet capture
The README points to Curisoum for creating a separate PCAP for each Heralding session and says to enable it in Heralding.yml.github.com · 3 Oct 2026
License
GitHub identifies the project as GPL-3.0 licensed.github.com · 3 Oct 2026
Intended users
The project describes itself as a honeypot for users who want to collect credentials.github.com · 3 Oct 2026

Best Heralding alternatives

See all 17
All accessCh 01 OpenCanary Free planLinuxMac Free to start7.3 All accessCh 02 Beelzebub Free planFree trialAPI Free to start7.2 All accessCh 03 Canarytokens Free planAndroidiOS Free to start7.2 All accessCh 04 Honeyd Free planLinuxself-hosted Free to start7.0 All accessCh 05 T-Pot Free planLinuxMac Free to start7.0 All accessCh 06 Cowrie Free planLinuxself-hosted Free to start6.9

Where it ranks on Specifiction

Is Heralding yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Heralding

Sources