Side by side
Canarytokens vs Dionaea
Both stand on honeypot software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan AndroidiPhoneSelf-hosted+2
Canarytokens offers a range of decoys and alert options, with both hosted and self-hosted approaches. Check browser support and Windows setup requirements for the token types you plan to use.
Visit Canarytokens Free plan LinuxSelf-hosted
Dionaea provides a broad range of network-service honeypot protocols, logging formats, and deployment choices. Review the documented system guidance and security warning before deploying it.
Visit DionaeaThe facts
| Canarytokens | Dionaea | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Android, iPhone, Self-hosted, Web, Windows | Linux, Self-hosted |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | canarytokens.org | github.com |
| On honeypot software | #1 of 21 | #4 of 21 |
Canarytokens: what it does well
- Hosted token creation requires no software installation.
- Email alerts are available when tokens are triggered.
- Some token types support webhook alerts.
- Documented decoys cover network, cloud, and Windows examples.
- Hosted service is free.
What to know first
- Fake App supports only Safari and Google Chrome.
- Sensitive Command requires admin permission to import its registry file.
- New Slack API Tokens cannot be created.
Dionaea: what it does well
- Supports TCP, UDP, and TLS services
- Lists a broad set of network protocols
- Routes incident information to JSON, SQLite, SQL, or hpfeeds
- Official Docker image is available
- Free and open source
What to know first
- Documentation warns it may contain exploitable bugs
- Installation guidance cautions against Ubuntu 20.04 and Debian 11
- DionaeaFR frontend is marked unmaintained since 2014
Alternatives to Canarytokens Alternatives to Dionaea The whole list