Sold by: Salient Engineering
Deployed on AWS
AWS Free Tier
HoneyDrop is a honeypot appliance designed to detect and alert the presence of threat actors in an AWS VPC.
Overview
HoneyDrop is a powerful appliance designed to enhance your network's security by setting up decoy services that attract and distract attackers. When deployed within your internal network, it tricks cybercriminals into targeting these fake services instead of your real assets, giving you a crucial edge in detecting and understanding potential threats.
HoneyDrop logs every interaction with its decoys to AWS CloudWatch, delivering real-time visibility into suspicious activity. Alerts can be sent via Discord, Microsoft Teams, or Slack, enabling rapid response to threats. You can also configure CloudWatch alarms to trigger Lambda functions for automated incident handling.
Highlights
- Lure attackers away from high value systems long enough to be identified
- Instant notifications of honeypot interactions via Slack, Discord and Microsoft Teams
- Enable automated incident response actions to isolate and quarantine compromised hosts
Details
Sold by
Categories
Delivery method
Delivery option
Quick and Simple HoneyDrop Configuration and Deployment
Latest version
Operating system
Ubuntu 20.04
Deployed on AWS
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.micro AWS Free Tier | $0.02 |
t2.micro AWS Free Tier | $0.02 |
t2.large | $0.09 |
t3.large | $0.09 |
t3a.medium | $0.05 |
t3a.nano | $0.02 |
t3.nano | $0.02 |
t2.medium | $0.05 |
t3.medium | $0.05 |
t2.nano | $0.02 |
Vendor refund policy
Refunds considered on a case-by-case basis.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Quick and Simple HoneyDrop Configuration and Deployment
This AWS CloudFormation template deploys HoneyDrop, a configurable honeypot appliance designed to attract and monitor unauthorized access attempts across multiple network protocols. It provisions an EC2 instance with integrated AWS Secrets Manager for managing alerting (Slack, Discord, Microsoft Teams) and service configuration, and uses IAM roles to securely grant access to required resources.
Key features:
- Deploys in your VPC and subnet of choice
- Supports over a dozen honeypot services including SSH, FTP, HTTP, MySQL, Redis, RDP, Telnet, and more
- Centralized configuration via CloudFormation parameters and Secrets Manager
- Auto-updating appliance with structured alerting
- Includes security group configuration for all enabled protocols
- Management access via port 2222 with configurable CIDR restrictions
Ideal for security research, deception environments, or threat intelligence collection in cloud-based networks.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Production-Ready Honeypot Appliance Release
Streamlined Deployment: All configuration is now handled during the initial CloudFormation deployment, no post-deployment setup required.
Centralized Alert Management: Alert settings for Slack, Microsoft Teams, and Discord, as well as service enablement/disablement, are now managed through AWS Secrets Manager.
Improved Alerting: Alerts are now consistently formatted for better readability.
Auto-Updating Enabled: The appliance now supports automatic updates to ensure you're always running the latest version.
Additional details
Usage instructions
- Enter the required parameters in the CloudFormation stack
- Slack, Discord, and Teams alerting is optional
- Set the desired honeypot services to true
- Once deployed, edit services and configure alerts as desired by modifying the HoneyDrop secret in Secrets Manager
Resources
Vendor resources
Support
Vendor support
We offer responsive and friendly support available to all HoneyDrop customers. Just reach out to us via email at: support@salientengineering.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Windows 2019 - Nice DCV
By Arara Solutions
This is a repackaged open source software product wherein additional charges apply for technical support. Softwares included: Windows 2019 , NICE DCV
Cloud Sync service
By NetApp, Inc.
The NetApp Cloud Sync service provides a simple, automated way to get your data in to Amazon Web Services (AWS), run a service (such as EMR, Redshift, RDS) and get the data back on your premises.
CentOS 9 Desktop - GUI Gnome with NICE DCV
By Arara Solutions
This is a repackaged open source software product wherein additional charges apply for technical support. Softwares Included: CentOS 9 Stream, Gnome and NICE DCV
Ubuntu 22 Desktop - NICE DCV High-End Remote Desktop (no GPU)
By NI SP - High-End Remote Desktop and HPC
Ubuntu 22 Remote Desktop with high-end NICE DCV streaming experience - includes 3D MESA support
Customer reviews
No customer reviews yet
Be the first to write a review for this product.