11
Docker Containers
60k+
Events Captured
92
Attackers Profiled
Overview
Deception platform emulating vulnerable services to detect attackers. SSH honeypots with realistic AI responses (GPT-4o-mini), event pipeline via NATS JetStream, VirusTotal/AbuseIPDB enrichment, attacker profiling, and direct bridge to Presidio XDR for automated response. 60k+ events captured.
Tech stack
GoReactNATSPostgreSQLOpenAIDockerCowrieOpenCanary