Side by side
Heralding vs MedPot
Both stand on honeypot software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxSelf-hosted
Heralding combines credential capture with detailed session logging across many protocols. Its records and deployment options make it suitable for self-hosting, while log timing and plaintext credential capture are important to account for.
Visit Heralding Free plan LinuxSelf-hosted
MedPot provides an application-level decoy for HL7 and FHIR services with configurable listening and logging options. Its README leaves support and security-certification details unspecified, so deployment decisions depend on the project’s documented setup and the user’s requirements.
Visit MedPotThe facts
| Heralding | MedPot | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Self-hosted | Linux, Self-hosted |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | github.com | github.com |
| On honeypot software | #8 of 21 | #12 of 21 |
Heralding: what it does well
- Supports a wide range of network protocols.
- Records plaintext passwords when protocols make them available.
- Writes authentication and session data to CSV and JSON Lines.
- README describes both pip and Docker deployment.
What to know first
- Requires Python 3.7.0 or higher.
- Session logs appear only after a session ends.
- Plaintext passwords are recorded when available.
MedPot: what it does well
- Free, open-source, self-hosted deployment
- Emulates HL7 and FHIR services
- Can run as a binary or Docker container
- Port and log location can be changed
What to know first
- Requires Go 1.17 or newer
- Default configuration listens on port 2575
- README specifies no support terms or security certifications
Alternatives to Heralding Alternatives to MedPot The whole list