BW-Pot
BW-Pot is an interactive web application honeypot that deploys vulnerable applications to attract and monitor HTTP/HTTPS attacks, with automated logging to Google BigQuery for analysis.
BW-Pot is an interactive web application honeypot that deploys vulnerable applications to attract and monitor HTTP/HTTPS attacks, with automated logging to Google BigQuery for analysis.
Checked October 2026.
BW-Pot (Breakable Web applications honeyPot) is an interactive honeypot system designed to monitor and analyze HTTP/HTTPS attacks by deploying vulnerable web applications as bait.
The system creates easily compromised web application environments that attract attackers, allowing security researchers to observe attack patterns and techniques. It includes multiple vulnerable web applications such as WordPress and phpMyAdmin to simulate realistic attack targets.
Key features include automatic daily restoration to clean environments, ensuring consistent honeypot states for ongoing monitoring. The system captures comprehensive logs and forwards them to Google BigQuery for centralized storage and analysis. Real-time log integration enables immediate visibility into attack activities.
Network traffic analysis capabilities include automatic packet capture file generation, which can be downloaded and analyzed using tools like Wireshark. The system implements automatic log rotation to manage storage efficiently.
BW-Pot operates effectively on low-specification servers, requiring only 2GB RAM and 10GB SSD storage. It uses Docker and Docker-Compose for containerized deployment, making installation and management straightforward.
The architecture supports integration with Google Cloud Platform for log storage and visualization through BigQuery's web interface. Users can create custom dashboards and execute SQL queries to analyze collected attack data.
The system is designed for security researchers, threat hunters, and organizations seeking to understand attack methodologies targeting web applications.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Common questions about BW-Pot: features, pricing and alternatives.
BW-Pot is a product in the Honeypots & Deception category. It covers Vulnerability Research, Packet Capture and Attack Detection.
BW-Pot is free. Download and setup instructions are at https://github.com/graneed/bwpot/.
Alternatives to BW-Pot listed on CybersecTools:
Compare all BW-Pot alternatives at https://cybersectools.com/alternatives/bw-pot
BW-Pot is available as cloud or on-premises (hybrid). It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Blacknet is a low interaction SSH multi-head honeypot system with logging capabilities.
A Java-based Bluetooth honeypot that captures and analyzes malware and attacks targeting Bluetooth-enabled devices.
Managed human-centric deception service deploying honeypots to detect attackers.
A security framework for process isolation and sandboxing based on capability-based security principles.
AI-based deception platform for collecting cyber threat intelligence
A low interaction honeypot for detecting CVE-2018-0101 vulnerability in Cisco ASA component.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
