Krain is a lightweight open-source honeypot built for solo devs and small teams, not SOC teams. Host it once next to your real site and let it take the hits instead. It fakes an SSH login, a Grafana, and a full security console with PDFs and admin logins that lead nowhere. Touch the wrong file and you walk off with a planted AWS key that goes nowhere real. Scanners get stuck in tarpits: slow responses, endless directory listings, gzip bombs. Everything logs locally, no enterprise stack needed.
