Thinkst Applied Research

Thinkst Applied Research is a cybersecurity company focused on deception-based threat detection. The company develops and maintains a suite of products designed to alert defenders when a network breach has occurred, with an emphasis on reducing detection time after compromise.

Their primary commercial product, Thinkst Canary, is a hardware and software-based honeypot solution that can be deployed on networks to serve as a high-fidelity indicator of compromise. When an attacker interacts with a Canary device, an alert is generated, notifying administrators of unauthorized activity. The product is designed for rapid deployment, including on complex network environments.

Canarytokens is a free, open-access tool that allows users to embed traceable tokens into files, URLs, and other digital assets. When these tokens are accessed or opened by an unauthorized party, the system automatically notifies the asset owner, effectively causing attackers to reveal their presence.

OpenCanary is an open-source daemon that simulates network services and generates alerts when those services are accessed. It integrates with logging systems such as Syslog and email, and supports a companion correlation daemon called OpenCanary-correlator.

Additionally, Thinkst publishes ThinkstScapes, a vendor-neutral research and threat intelligence report that provides context, commentary, and guidance on notable events and findings in the information security space.

The company's products target organizations of varying sizes seeking early breach detection through deception technology, without reliance on signature-based or high-volume alerting approaches.