Side by side
Conpot vs T-Pot
Both stand on honeypot software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxSelf-hosted
Choose Conpot if you need a free, self-hosted honeypot for industrial control system attack intelligence and want to customize the emulated environment. Look elsewhere if you need software with a warranty or want shared data without setting up HPFriends access.
Visit Conpot Free plan LinuxMacSelf-hosted+1
T-Pot brings honeypots, event analysis, and monitoring tools into a self-hosted deployment. Its project warns that compromise is possible, so it should not hold sensitive data.
Visit T-PotThe facts
| Conpot | T-Pot | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Self-hosted | Linux, Mac, Self-hosted, Windows |
| Lowest paid plan | Not published | Free or on request |
| Plans published | None | 1 |
| Maker | Not published | Not published |
| Website | github.com | github.com |
| On honeypot software | #7 of 21 | #11 of 21 |
Conpot: what it does well
- Free and open source under GPL-2.0.
- Default profile presents Siemens S7-200 emulation and four protocols.
- Deployable with Docker, PyPI, or source.
- Custom templates and port changes are supported.
- ConpotFS proxies files through a controlled location.
What to know first
- Host installation requires Python 3.10 or newer.
- HPFeeds is disabled by default.
- Shared data access requires an HPFriends account and authentication key.
- The license provides the software without warranty.
T-Pot: what it does well
- Includes more than 20 honeypots.
- Supports standalone and distributed deployments.
- Includes Fatt, P0f, and Suricata.
- Log and index retention settings are adjustable.
What to know first
- macOS and Windows have a limited feature set.
- Recommended hive hardware includes 16 GB RAM.
- Provided as-is without a support commitment.
- Data submission is enabled by default.