Sold by: Salient Engineering
Deployed on AWS
Free Trial
AWS Free Tier
HoneyDrop is a honeypot appliance designed to detect and alert the presence of malicious threat actors in an AWS VPC.
Overview
HoneyDrop is a honeypot appliance that deploys decoy services on your internal network. Attackers who scan or probe the network interact with those decoys, so you can detect suspicious activity and study how it behaves before it reaches production systems.
Every interaction with a decoy is logged to Amazon CloudWatch, giving you a live record of what was touched and when. Alerts can be sent to Discord, Microsoft Teams, or Slack so your team can respond immediately. You can also attach CloudWatch alarms to AWS Lambda functions and automate incident handling.
- Decoy services that attract probes away from real assets
- A complete log of decoy interactions in Amazon CloudWatch
- Alerts to Discord, Microsoft Teams, and Slack
- CloudWatch alarms that can invoke Lambda for automated response
Highlights
- Lure attackers away from high value systems long enough to be identified
- Instant notifications of honeypot interactions via Slack, Discord and Microsoft Teams
- Enable automated incident response actions to isolate and quarantine compromised hosts
Details
Sold by
Categories
Delivery method
Delivery option
Quick and Simple HoneyDrop Configuration and Deployment
Latest version
Operating system
Ubuntu 20.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t2.micro | $0.02 |
t3.micro | $0.02 |
t3.medium | $0.05 |
t2.nano | $0.02 |
t2.medium | $0.05 |
t3.nano | $0.02 |
t3a.nano | $0.02 |
t3a.medium | $0.05 |
t3.large | $0.09 |
t2.large | $0.09 |
Dimensions summary
You pay an hourly software fee for HoneyDrop, billed by the EC2 instance type you run it on. The 15 dimensions map to instance sizes across the t2, t3, and t3a families, from t2.nano and t3.nano up to t2.xlarge. Each option covers the same honeypot appliance on a single EC2 instance. Your cost scales with the instance size you pick: pricing is per hour for each type. You also pay standard AWS charges for EC2 and CloudWatch separately from this software fee.
Top-of-mind questions for buyers
Each hourly fee covers one running HoneyDrop appliance on a single EC2 instance of the type you pick. The clock meters per running hour. To cover multiple subnets or regions, you deploy separate instances, and each instance bills its own hourly software fee.
The software fee meters running instance-hours. A fully stopped instance does not accrue the hourly software charge. Stopped instances can still incur AWS storage fees for the attached EBS volume, which is separate from the HoneyDrop software fee.
You pay standard AWS rates for EC2 compute and for CloudWatch, on top of the hourly software fee. These AWS charges appear separately. Optional alarms and notifications through SNS may add their own AWS usage costs depending on how you configure them.
salientengineering.com
Helpful?
Vendor refund policy
Refunds considered on a case-by-case basis.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Quick and Simple HoneyDrop Configuration and Deployment
This AWS CloudFormation template deploys HoneyDrop, a configurable honeypot appliance designed to attract and monitor unauthorized access attempts across multiple network protocols. It provisions an EC2 instance with integrated AWS Secrets Manager for managing alerting (Slack, Discord, Microsoft Teams) and service configuration, and uses IAM roles to securely grant access to required resources.
Key features:
- Deploys in your VPC and subnet of choice
- Supports over a dozen honeypot services including SSH, FTP, HTTP, MySQL, Redis, RDP, Telnet, and more
- Centralized configuration via CloudFormation parameters and Secrets Manager
- Auto-updating appliance with structured alerting
- Includes security group configuration for all enabled protocols
- Management access via port 2222 with configurable CIDR restrictions
Ideal for security research, deception environments, or threat intelligence collection in cloud-based networks.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Production-Ready Honeypot Appliance Release
Streamlined Deployment: All configuration is now handled during the initial CloudFormation deployment, no post-deployment setup required.
Centralized Alert Management: Alert settings for Slack, Microsoft Teams, and Discord, as well as service enablement/disablement, are now managed through AWS Secrets Manager.
Improved Alerting: Alerts are now consistently formatted for better readability.
Auto-Updating Enabled: The appliance now supports automatic updates to ensure you're always running the latest version.
Additional details
Usage instructions
- Enter the required parameters in the CloudFormation stack
- Slack, Discord, and Teams alerting is optional
- Set the desired honeypot services to true
- Once deployed, edit services and configure alerts as desired by modifying the HoneyDrop secret in Secrets Manager
Resources
Vendor resources
Support
Vendor support
We offer responsive and friendly support available to all HoneyDrop customers. Just reach out to us via email at: support@salientengineering.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Honeycomb helps DevOps, SRE, and engineering teams understand and troubleshoot complex relationships within distributed services. See how services are performing, and drill down to issues with individual users without having to correlate and make guesses across different data types.
Honeybadger is an application monitoring platform that combines error tracking, uptime monitoring, cron job monitoring, log management, and status pages in one subscription. It installs in minutes, cuts alert noise with intelligent error grouping, and gives your team full-stack visibility - from individual exceptions to system-wide health.
Collaborate everywhere, instantly with LucidLink. Empower your team to access, edit and share files of any size in real time, without syncing or downloading. With seamless setup, familiar workflows and zero-knowledge encryption, LucidLink frees your team to collaborate without limits.
A Company's eCHO B2B Intent Score on all given Drag And Drop Technology topics. Each record will provide Company, Main Category, SubCategory, Topic, Intent Velocity Score, Street, Suite, City, State, and Zip
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.