Thanks for considering a contribution to this list! Please ensure your pull request adheres to the following guidelines:
- Suggested resources should be on-topic for cyber deception: honeytokens, decoys, canaries, deception-aware detection, attacker engagement, or related research and operations.
- Individual open source honeypots are best sent to awesome-honeypots rather than this list. Articles, papers, talks, and frameworks that happen to involve honeypots are still in scope here.
- Make sure the resource is high-quality, useful, and not duplicated elsewhere on the list.
- Place new entries at the bottom of the appropriate section unless there is a clear reason to put them elsewhere.
- Use the format
- [Name](link) - Description.- Description starts with an uppercase character and ends with a period.
- Years for papers, talks, or conference editions should appear in the description in parentheses, e.g.
(2025).
- Check spelling and grammar. Keep wording neutral and factual; avoid marketing language.
- Verify the link works and points to a stable URL. Prefer canonical sources (publisher pages, arXiv, vendor blog) over mirrors.
- Verify the year from the source itself (publication date, paper metadata, conference page). Do not infer it from surrounding context.
- One resource (or one logically related batch) per pull request makes review easier.
- The pull request should have a useful title and a brief description of why the resource belongs here.
- Do not submit fully AI-generated additions. Manual curation and verification are required.
If you spot a broken link, a withdrawn paper, or a project that has gone unmaintained, please open a pull request to remove or replace it.
Thank you for your suggestions!