C

Conpot

Free#10 of 21 in Honeypot Software

Conpot: A configurable, self-hosted honeypot for industrial protocol emulation and attack logging. Ranked #10 of 21 in Honeypot Software by our editors (7.8/10); pricing: Free plan; best for ICS and SCADA honeypots.

7.8/10★★★★☆Editor score

Visit Conpot

At a glance

• Editor score
  7.8 / 10
• Pricing
  Free plan
• Best for
  ICS and SCADA honeypots
• Free plan
  Yes
• Paid from
  Free
• Deployment model
  Self-hosted
• Founded
  2013
• Facts checked
  22 Sep 2026

• Where it wins

  • Emulates Modbus, HTTP, SNMP, S7comm, and additional industrial protocols
  • Structured logging supports JSON, SQLite, syslog, HPFriends, and TAXII sinks
  • Offers configurable templates, proxy mode, Docker, and Python installation

• Where it doesn't

  • Linux is the only listed platform
  • Self-hosted deployment requires technically capable operators
  • Its ecosystem and integration breadth is narrower than broader platforms

Our verdict on Conpot

Conpot is an open-source, self-hosted honeypot for industrial control system and supervisory control and data acquisition environments. It is designed for security researchers, educators, defenders, and technically capable operators who need to collect intelligence about adversaries targeting industrial systems. Its network decoy scope focuses on emulating ICS/SCADA services and protocols rather than providing a general-purpose enterprise deception platform.

Protocol coverage is the central strength. Conpot supports Modbus, HTTP, SNMP, and S7comm, with additional support for IEC 104, ENIP/CIP, BACnet, FTP, IPMI, TFTP, and Kamstrup. TOML templates and databus settings allow operators to configure the emulated environment, while proxy mode can bridge the honeypot to a real backend. Attack data can be sent to JSON, SQLite, syslog, HPFriends, and TAXII sinks, giving teams several structured logging paths for analysis and sharing.

Deployment remains a technical responsibility. Conpot runs on Linux and can be installed directly with Python or deployed through Docker and docker-compose. That self-hosted model suits teams that want control over placement, configuration, and data handling, but it is less suitable for buyers seeking a managed SaaS service or a guided onboarding process. The project’s 2013 founding year supports its maturity, while its narrower platform coverage and limited ecosystem breadth may matter to teams operating outside Linux or requiring wider integrations. Choose Conpot for customizable ICS/SCADA deception; consider an alternative when managed operations or broader platform coverage are priorities.

Your product? Our editors can test Conpot in depth and publish a review, labelled as paid · from $149/mo →

Conpot pricing

Conpot fact sheet

Alternatives to Conpot

• BeelzebubA flexible self-hosted honeypot runtime with adaptive interactions and deep security integrations.9.4
• CowrieA mature, deep SSH and Telnet honeypot for self-hosted threat monitoring.9.2
• TPT-PotA broad self-hosted honeypot platform for teams that want many decoys and built-in analysis.9.0

See all Conpot alternatives →

Used Conpot? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Conpot for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Website

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

5 stars★4 stars★3 stars★2 stars★1 star★

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?Prefer not to sayLess than a month1–6 months6–12 months1–2 years2+ years

I've used Conpot myself and this is my honest opinion — nobody paid or asked me to write it.

Send my reviewPosted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update