Canarytokens
Free tool to detect breaches by having attackers announce themselves
Canarytokens is a free tool for creating lightweight honeypot triggers that can be placed around a network, in documents, or in other assets. When a token is activated, the user receives an alert, helping them detect unauthorized access or suspicious activity.
The tool offers a wide range of token types, including web bugs, DNS names, AWS infrastructure and API keys, credit card numbers, QR codes, MySQL dumps, MCP configurations, fake apps, Log4shell triggers, and redirects. It also supports tokens for Microsoft Excel and Word documents, PDFs, Windows folders and fake file systems, SVN repositories, unique email addresses, MS SQL Server databases, custom EXE or DLL files, Kubeconfig files, WireGuard VPN configurations, Azure Entra ID logins, WebDAV network folders, SAML IdP apps, and SVG images. Tokens can be created through a web interface with search and filtering options.
Canarytokens is designed for individuals and organizations seeking to monitor for unauthorized access across their networks and assets. The tool is provided as a free service, with no paid plans, trials, or editions mentioned.
12 alternatives to Canarytokens
Ranked by how well each tool replaces Canarytokens: shared features, audience, price and popularity.
Deception-based intrusion detection using hardware, virtual and cloud-based decoy devices.
Covers 2 of 15 key features.
62 out of 100 match$625/mo- 60 out of 100 matchContact sales
Free automated malware analysis service powered by CrowdStrike Falcon Sandbox
Covers 1 of 15 key features.
Free plan59 out of 100 matchFreeInteractive online malware sandbox with threat intelligence
Covers 0 of 15 key features.
Free plan59 out of 100 matchFreeDNS-focused threat intelligence platform for detecting and blocking malicious domains.
Covers 1 of 15 key features.
56 out of 100 match—Hosted vulnerability scanners and network tools for attack surface discovery and security.
Covers 0 of 15 key features.
Free plan56 out of 100 match$10/moContinuous Threat Exposure Management platform combining AI with a community of security
Covers 0 of 15 key features.
55 out of 100 matchContact sales- 55 out of 100 matchFree
Tap into the Future of Security Workflows
Covers 1 of 15 key features.
Open source54 out of 100 match—- 53 out of 100 matchContact sales
A SUID program that restricts the running environment of untrusted applications using the
Covers 2 of 15 key features.
Free planOpen source53 out of 100 matchContact salesFree browser and plugin vulnerability scanning tool
Covers 2 of 15 key features.
Free plan53 out of 100 matchContact sales
