Honeypot Software
Alternatives to TANNER
The tools Specifiction weighs against TANNER, from its list of honeypot software, each with its plans, platforms and spec score.
- 01
Canarytokens Canarytokens suits people who want alerts when decoy credentials or other tokens are accessed in their network, computer, or cloud environment.
Free plan Web · Windows · iOS · Android8.2 Visit Specs - 02 OpenCanary
OpenCanary suits teams that want a self-hosted decoy for detecting activity on non-public networks.
Free plan macOS · Linux · Self-hosted8.2 Visit Specs - 03
Beelzebub Beelzebub suits security teams that want decoy sessions investigated and documented, with events sent to their existing integrations.
Free plan Linux · API · Self-hosted8.1 Visit Specs - 04
Cowrie Cowrie suits security researchers, CERTs and defenders who want to observe SSH and Telnet attacks in a self-hosted honeypot.
Free plan Linux · Self-hosted7.9 Visit Specs - 05
DentiGrid It suits MSSPs needing isolated tenant views and enterprise SOC teams deploying decoys across managed or self-hosted environments.
Web · API · Self-hosted7.8 Visit Specs - 06 Dionaea
Dionaea suits security teams or researchers who can deploy and manage a self-hosted Linux honeypot.
Free plan Linux · Self-hosted7.7 Visit Specs - 07 Endlessh
Endlessh suits administrators who want to keep unwanted SSH clients occupied on a self-hosted Linux system.
Free plan Linux · Self-hosted7.7 Visit Specs - 08 Honeyd
Honeyd suits users building host-based or network-based virtual honeypots, virtual honeynets or network monitoring setups.
Free plan Windows · Linux · Self-hosted7.7 Visit Specs - 09 Honeytrap
Honeytrap suits teams operating self-managed Linux honeypots that need centralized agent configuration or multiple interaction levels.
Free plan Linux · Self-hosted7.7 Visit Specs - 10 KFSensor
It suits security teams needing a Windows honeypot with broad service emulation, event integrations, and attack reporting.
From $10/mo Free trial Windows7.7 Visit Specs - 11
CounterCraft The Platform It suits enterprise organizations in government, financial services, healthcare, telecoms, manufacturing, and critical infrastructure.
Web · Self-hosted7.5 Visit Specs - 12 Heralding
Heralding suits users who want a self-hosted network decoy to collect credentials and record session details.
Free plan Linux · Self-hosted7.5 Visit Specs - 13 MedPot
MedPot suits people who need to deploy an HL7/FHIR honeypot on a Linux host.
Free plan Linux · Self-hosted7.5 Visit Specs - 14
Thinkst Canary It suits organizations seeking network decoys, credential lures, cloud decoys, and multi-layer intrusion detection.
From $625/mo Web · Windows · macOS · Linux7.4 Visit Specs - 15 Conpot
It suits developers, ICS security researchers, and honeypot operators investigating industrial-control-system threats.
Linux · Self-hosted7.3 Visit Specs - 16 T-Pot
T-Pot suits users who can self-host and manage the stated hardware and network requirements.
Free plan Windows · macOS · Linux · Self-hosted7.3 Visit Specs - 17 ADBHoney
ADBHoney suits security investigators examining activity against exposed Android Debug Bridge services.
Self-hosted7.1 Visit Specs - 18 Mailoney
Mailoney suits security teams seeking to capture SMTP access and credential-harvesting attempts in a self-hosted environment.
Windows · Linux · Self-hosted6.9 Visit Specs - 19 Glutton Linux5.6 Visit Specs
- 20 SNARE Linux5.2 Visit Specs