Side by side
Dionaea vs Heralding
Both stand on honeypot software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxSelf-hosted
Dionaea provides a broad range of network-service honeypot protocols, logging formats, and deployment choices. Review the documented system guidance and security warning before deploying it.
Visit Dionaea Free plan LinuxSelf-hosted
Heralding combines credential capture with detailed session logging across many protocols. Its records and deployment options make it suitable for self-hosting, while log timing and plaintext credential capture are important to account for.
Visit HeraldingThe facts
| Dionaea | Heralding | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Self-hosted | Linux, Self-hosted |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | github.com | github.com |
| On honeypot software | #4 of 21 | #8 of 21 |
Dionaea: what it does well
- Supports TCP, UDP, and TLS services
- Lists a broad set of network protocols
- Routes incident information to JSON, SQLite, SQL, or hpfeeds
- Official Docker image is available
- Free and open source
What to know first
- Documentation warns it may contain exploitable bugs
- Installation guidance cautions against Ubuntu 20.04 and Debian 11
- DionaeaFR frontend is marked unmaintained since 2014
Heralding: what it does well
- Supports a wide range of network protocols.
- Records plaintext passwords when protocols make them available.
- Writes authentication and session data to CSV and JSON Lines.
- README describes both pip and Docker deployment.
What to know first
- Requires Python 3.7.0 or higher.
- Session logs appear only after a session ends.
- Plaintext passwords are recorded when available.
Alternatives to Dionaea Alternatives to Heralding The whole list