T-Pot
T-Pot: A broad self-hosted honeypot platform for teams that want many decoys and built-in analysis. Ranked #3 of 21 in Honeypot Software by our editors (9.0/10); pricing: Free plan; best for maximum honeypot breadth in one platform.
At a glance
- Editor score9.0 / 10
- PricingFree plan
- Best forMaximum honeypot breadth in one platform
- Free planYes
- Paid fromFree
- Deployment modelSelf-hosted
- Facts checked22 Sep 2026
Where it wins
- More than 20 honeypots bundled in one platform
- Elastic dashboards, attack maps, and network monitoring included
- Supports standalone Hive or distributed Hive and Sensor deployments
Where it doesn't
- Self-hosted deployment requires infrastructure and administration
- macOS and Windows support is limited to Docker Desktop deployments
- Stored honeypot logs are persisted for 30 days
Our verdict on T-Pot
T-Pot is a self-hosted, open-source honeypot platform for security monitoring, deception, and research environments. It brings more than 20 honeypots into one deployment, with Elastic Stack event storage, ingestion, and dashboards alongside attack visualization and network-security monitoring. Its audience is teams that want a multi-layer decoy environment rather than a single-purpose honeypot, especially when they need supporting analysis tools in the same platform.
The published model is open source with a free plan, so T-Pot suits buyers seeking broad honeypot coverage without a listed commercial tier structure. Its scope extends beyond decoys: Suricata, Fatt, P0f, CyberChef, Elasticvue, and SpiderFoot are included, while Beelzebub and Galah add LLM-based honeypots. Customizable Docker Compose configurations let teams select honeypots and services for different monitoring or research environments. This breadth is the main reason to choose T-Pot, but it also means the platform is better suited to teams that want to manage a wider security stack than to buyers seeking a narrowly focused sensor.
Deployment flexibility is a central strength. A standalone Hive can collect and manage activity, while a distributed architecture separates Sensors from the Hive for deployments across locations or network segments. T-Pot supports multiple Linux distributions, with limited macOS and Windows deployments through Docker Desktop. The platform also stores honeypot logs for 30 days, which is relevant when planning investigation and retention workflows. Choose T-Pot when multi-honeypot coverage, visualization, and self-managed customization matter most; choose a more focused alternative when a simpler deployment or a different operating-system model is the priority.
Your product? Our editors can test T-Pot in depth and publish a review, labelled as paid · from $149/mo →
T-Pot pricing
T-Pot fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Deployment model | Self-hosted |
| Decoy scope | Multi-layer |
| Credential lures | Not verified |
| Cloud decoys | Not verified |
| Maximum decoys | Not verified |
| Data retention | Not verified |
| Deployment | Self-hosted, Cloud, Desktop |
| Platforms | Linux, macOS, Windows |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 22 Sep 2026 |
Alternatives to T-Pot
- BeelzebubA flexible self-hosted honeypot runtime with adaptive interactions and deep security integrations.9.4
- CowrieA mature, deep SSH and Telnet honeypot for self-hosted threat monitoring.9.2
- CanarytokensA free, cloud-based token platform for broad deception and intrusion detection.8.8
T-Pot vs the competition
- T-Pot vs Beelzebub
- T-Pot vs Cowrie
- T-Pot vs Canarytokens
- T-Pot vs OpenCanary
- T-Pot vs Thinkst Canary
- T-Pot vs CounterCraft The Platform
Compare T-Pot with any tool side by side →
Used T-Pot? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used T-Pot for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
T-Pot is listed in our Honeypot Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/t-pot/"><img src="https://www.itechguides.com/best/badge/t-pot.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update