I built HoneyWire because I wanted high-fidelity cyber canaries on my network to detect lateral movement, but I didn't have an enterprise budget. While exploring existing open-source options, I hit a massive wall: they all required installing and managing heavy, persistent daemons on my production servers, plus manually editing config files on every single host. So, as a student and solo developer, I decided to build a completely different architecture. With HoneyWire v2.0, I implemented a zero-agent model. Instead of background daemons, you run a simple CLI wizard. It discovers the environment, pulls down hardened, distroless Docker trap containers, registers them to a centralized Hub UI, and then exits entirely. In about 60 seconds, you have turned any linux box into a Canary. A few things I’m really proud of: Centralized Fleet UI: Instantly see your nodes, uptime, and health at a glance. Zero-Friction Alerts: Out-of-the-box SIEM forwarding and push notifications. Security First: Enforces strict container capabilities and cryptographic image digest pinning to prevent escapes. I built this to democratize deception tech for homelabbers, startups, and SMBs. I’d love for you to test it out, poke holes in the architecture, or let me know what you think of the Hub dashboard!

HoneyWire

Open-source, deception cyber canaries anywhere in 60 seconds

Open-source, deception cyber canaries anywhere in 60 seconds