v0.1.0
Decoy v0.1.0
Self-hosted canary tokens & honeypots: web/URL tokens, document beacons (docx/xlsx/pdf), TCP honeypot listeners, DNS tokens and fake cloud credentials — alerts the moment anything is touched.
This is the free edition, built from this repository with an empty license issuer key — it has no license activation. Free-tier limits: 3 tokens + 1 honeypot (advanced traps: Pro/Team). Pro and Team tiers (higher limits, delivered binaries) are available at whop.com/nizar-tuanku/decoy-canary-honeypots.
Install
tar -xzf decoy-free-0.1.0-linux-amd64.tar.gz
./decoy
Dashboard: http://127.0.0.1:8424 — single binary, SQLite storage in the working directory, no telemetry, nothing leaves your network.
Or build from source (Go 1.24+, CGO required for the SQLite driver):
go build ./cmd/decoy
Integrity
Verify the download:
sha256sum -c SHA256SUMS
SHA-256: 9617bb5fc80baaea58c1c5ea618de418845e2d4d07499c53a6d46bb6f389c02c
Feedback
Run it in a lab first. Bug reports and lab feedback via GitHub Issues are very welcome.