# Hornet

Hornet is a Honeypots & Deception product. It runs on-premises. Pricing is free.

Medium interaction SSH Honeypot with multiple virtual hosts and sandboxed filesystems.

Checked October 2026.

## What is Hornet?

Hornet is a medium interaction SSH Honeypot that supports multiple virtual hosts with sandboxed filesystems, allowing interactions across hosts and a default host for launching into others. It visualizes interactions through a diagram and has configurable attributes for each VirtualHost.

Tags: SSH, Security Research

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Security Operations](https://cybersectools.com/categories/security-operations) · [Honeypots & Deception](https://cybersectools.com/categories/honeypots)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 24
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best MDR Solutions for Business](https://cybersectools.com/shortlists/best-mdr-solutions).

## Hornet FAQ

### What is Hornet?

Hornet is a product in the Honeypots & Deception category. It covers SSH and Security Research.

### What is the pricing for Hornet?

Hornet is free. Download and setup instructions are at https://github.com/czardoz/hornet/.

### What are alternatives to Hornet?

Alternatives to Hornet listed on CybersecTools:

1. [The Honeynet Project](https://cybersectools.com/tools/the-honeynet-project) - Open-source nonprofit org developing honeypot tools & threat research. (Free)
2. [Thinkst Applied Research](https://cybersectools.com/tools/thinkst-applied-research) - Deception-based breach detection tools including honeypots & canary tokens. (Commercial)
3. [Trapster](https://cybersectools.com/tools/trapster) - Honeypot platform deploying network decoys to detect intrusions with zero false positives (Commercial)
4. [Deception Check Fleet Status](https://cybersectools.com/tools/deception-check-fleet-status) - Public honeypot fleet dashboard showing global attack telemetry and threat intel. (Commercial)
5. [Tracebit](https://cybersectools.com/tools/tracebit-dynamic-security-canaries) - Deploys security canaries across cloud, endpoints, SaaS and CI/CD to catch attackers. (Commercial)

Compare all Hornet alternatives at [https://cybersectools.com/alternatives/hornet](https://cybersectools.com/alternatives/hornet)

### What deployment and organization size does Hornet fit?

Hornet is available as on-premises. It is listed for smb, mid-market and enterprise organizations. It is free.

## Compare Hornet with similar solutions

- [Hornet vs The Honeynet Project](https://cybersectools.com/compare/hornet-vs-the-honeynet-project)
- [Hornet vs Thinkst Applied Research](https://cybersectools.com/compare/hornet-vs-thinkst-applied-research)
- [Hornet vs Trapster](https://cybersectools.com/compare/hornet-vs-trapster)

All alternatives to Hornet: [/alternatives/hornet](https://cybersectools.com/alternatives/hornet)

---

Source: https://cybersectools.com/tools/hornet

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Hornet: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md