Cowrie Alternatives
Cowrie is described as 'Medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker. Cowrie also functions as an SSH and telnet proxy to observe attacker behavior to another system' and is an app. There are more than 10 alternatives to Cowrie for a variety of platforms, including Self-Hosted, SaaS, Web-based, Docker and Linux apps. The best Cowrie alternative is HoneyWire, which is both free and Open Source. Other great apps like Cowrie are Thinkst Canary, Labyrinth Deception Platform, PivotGG and Defused.
Alternatives list
Canaries can be deployed in minutes (even on complex networks), giving you all of the benefits of a honeypot without the admin downsides.
Cost / License
- Paid
- Proprietary
Platforms
- Software as a Service (SaaS)
Labyrinth is a deception-based threat detection technology that identifies and blocks cyber-attacks from within a corporate network.
Cost / License
- Paid
- Proprietary
Platforms
- Self-Hosted
AI-powered pivot workflows and detection queries for incident response - paste an IOC, get guided pivot workflows, AI-generated Splunk/KQL searches, detection opportunities, and exportable investigation reports.
Cost / License
- Freemium
- Proprietary
Platforms
- Online
Defused provides plug-and-play capacities for internal detection of security incidents using decoys.
Cost / License
- Freemium
- Proprietary
Platforms
- Online
- Software as a Service (SaaS)
United States
EchidraOSS is a lightweight, high-performance open-source cyber deception platform. Built on an asynchronous Python 3.11 and FastAPI event loop, it keeps memory usage at 83MB and CPU flat under 20% during connection floods.
Cost / License
- Free
- Open Source (AGPL-3.0)
Platforms
- Self-Hosted
- Docker
India
Aves is a cloud-based cyber deception platform used to deploy and manage deception decoys in your on-premise & cloud environments.
Cost / License
- Freemium
- Proprietary
Platforms
- Windows
- Linux
- Online
- Software as a Service (SaaS)
Deception technology for early and accurate threat detection of in-network threats. Decoys, endpoint, application, and data deceptions deceive and detect attackers.
Cost / License
- Paid
- Proprietary
Platforms
- Self-Hosted
Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
Cost / License
- Free
- Open Source
Alerts
- Discontinued
Platforms
- Linux
Lupovis provides precise, high-fidelity threat identification with a drastically reduced alert to noise ratio through a SaaS Decepetion as a Service platform.
Cost / License
- Paid
- Proprietary
Platforms
- Self-Hosted
- Software as a Service (SaaS)
- United States
Reduce your reaction time to hackers thanks to Trapster's honeypot which quickly alerts you in case of intrusion on your company's network.
Cost / License
- Paid
- Open Source (AGPL-3.0)
Platforms
- Self-Hosted
- Software as a Service (SaaS)
Tracebit detects and contains security incidents using cloud canaries. Tracebit generates and maintains tailored canary resources in your cloud environments, closing gaps in stock protection without time and cost intensive detection engineering.
Cost / License
- Paid
- Proprietary
Platforms
- Online
Italy
EU
