MedPot
MedPot: A focused healthcare protocol honeypot for monitoring and research. Ranked #19 of 21 in Honeypot Software by our editors (6.8/10); pricing: Open source; best for healthcare protocol deception.
At a glance
- Editor score6.8 / 10
- PricingOpen source
- Best forHealthcare protocol deception
- Paid fromFree
- Deployment modelSelf-hosted
- Facts checked22 Sep 2026
Where it wins
- Emulates HL7 and FHIR services over configurable TCP ports
- Logs connection metadata and payloads with Base64 encoding
- Supports Docker builds and optional EWS/T-Pot submission
Where it doesn't
- Self-hosted Linux deployment requires technical administration
- Focuses on healthcare application protocols rather than broader decoy coverage
- Dummy XML responses are limited to recognized and unrecognized requests
Our verdict on MedPot
MedPot is a self-hosted, open-source honeypot for security monitoring and research involving healthcare communication protocols. It emulates HL7 and FHIR services over TCP, making it a focused option for teams investigating activity around healthcare application traffic. The project runs on Linux, can be compiled as a Go binary, and can be built as a Docker container.
Its main strength is protocol-specific deception with structured capture. MedPot listens on a configurable port, returns configurable dummy XML responses for recognized and unrecognized requests, and records connection metadata alongside received payloads. Captured payloads can be Base64 encoded, while the log location is configurable. These controls support deployments that need visibility into healthcare protocol interactions without exposing a production service. The selectable startup logo also provides a small customization point for deployments.
MedPot can submit captured connection data to an external EWS/T-Pot homebase when configured, giving it a defined fit within that ecosystem. Deployment remains self-hosted, so teams are responsible for compiling or containerizing the project, configuring the listener and logs, and operating the surrounding Linux environment. Its scope is deliberately narrow: the decoy centers on a single healthcare application area rather than a broad set of services. Choose MedPot when HL7 or FHIR deception, payload logging, and optional T-Pot integration are the priority. It is less suitable for teams seeking multi-application honeypot coverage or a managed deployment.
Questions about MedPot
What does MedPot run on? Linux. It runs self-hosted.
What does MedPot integrate with? 1 integration: EWS poster / T-Pot homebase.
Who is MedPot built for? Solo users and small businesses (our editorial estimate).
Your product? Our editors can test MedPot in depth and publish a review, labelled as paid · from $149/mo →
MedPot pricing
MedPot fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Deployment model | Self-hosted |
| Decoy scope | Application |
| Credential lures | Not verified |
| Cloud decoys | Not verified |
| Maximum decoys | Not verified |
| Data retention | Not verified |
| Deployment | Self-hosted |
| Platforms | Linux |
| Built for | Solo, Small business (editorial estimate) |
| Integrations | 1 integrations: EWS poster / T-Pot homebase |
| Pricing | Open source |
| Website | github.com |
| Facts checked | 22 Sep 2026 |
MedPot integrations
MedPot lists 1 integrations on its own site.
- EWS poster / T-Pot homebase
Alternatives to MedPot
- BeelzebubA flexible self-hosted honeypot runtime with adaptive interactions and deep security integrations.9.4
- CowrieA mature, deep SSH and Telnet honeypot for self-hosted threat monitoring.9.2
- T-PotA broad self-hosted honeypot platform for teams that want many decoys and built-in analysis.9.0
Used MedPot? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used MedPot for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
MedPot is listed in our Honeypot Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/medpot/"><img src="https://www.itechguides.com/best/badge/medpot.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update