Canary Tokens Alert You the Moment an Attacker Trips Your Trap
Canarytokens.org lets you plant tripwires across your infrastructure and get an alert the instant someone touches them. The free service offers more than 30 token types covering web bugs, DNS names, AWS keys and infrastructure, credit cards, QR codes, MySQL dumps, MCP configurations, Kubeconfigs, WireGuard VPN configs, Excel and Word documents, PDFs, cloned websites, and Azure Entra ID logins. Deploy one somewhere, and you'll know before it matters.
Create a Canarytoken. Deploy it somewhere. Know. When it matters.
- dang
Related. Others?
Canarytokens: Honeypot for critical credentials, get notified when they are used (2015) - https://news.ycombinator.com/item?id=41107209 - July 2024 (42 comments)
Canary Tokens - https://news.ycombinator.com/item?id=34157751 - Dec 2022 (59 comments)
A “Safety Net” for AWS Canarytokens - https://news.ycombinator.com/item?id=33644351 - Nov 2022 (1 comment)
Canarytokens - https://news.ycombinator.com/item?id=31914078 - June 2022 (3 comments)
An insanely easy-to-use honeypot solution that deploys in just four minutes - https://news.ycombinator.com/item?id=30374561 - Feb 2022 (4 comments)
Canarytokens – honeypot tokens that tell you when someone used them - https://news.ycombinator.com/item?id=15778011 - Nov 2017 (1 comment)
- hankyone
I’m using the concept across AI infra in my own project https://canarygrid.shadesec.com
- charlesabarnes
I think this service is already pretty good, but when defending against LLM based attacks, they're a godsend. Current tools don't appear to be too discerning.