SHSelfHostIndex
CA

Canary Tokens

Generates lightweight, embedded honeypot triggers called canary tokens

Reverse Proxy & Gateways ★ 3.1k stars Medium setup BSD-3-Clause

Generates lightweight, embedded honeypot triggers called canary tokens for detecting unauthorized access.

Official siteSource code

Strengths

  • Released under the BSD-3-Clause license
  • First-class Docker support for quick deployment
  • Active community (3.1k GitHub stars)
  • Written in Python

Is Canary Tokens secure?

No known vulnerabilities affect Canary Tokens's latest release (v0.9.10). OSV.dev lists 3 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-85219, published 2026-09-21 (23 days ago), fixed in 0.9.10

Source: OSV.dev, checked 2026-10-14. How this is measured.

Health badge

Maintain Canary Tokens? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 90 · excellent

Markdown
[![SelfHostIndex health score for Canary Tokens](https://selfhostindex.com/badge/canary-tokens.svg)](https://selfhostindex.com/app/canary-tokens/)
HTML
<a href="https://selfhostindex.com/app/canary-tokens/"><img src="https://selfhostindex.com/badge/canary-tokens.svg" alt="SelfHostIndex health score for Canary Tokens"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/canary-tokens.svg
   :alt: SelfHostIndex health score for Canary Tokens
   :target: https://selfhostindex.com/app/canary-tokens/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar reverse proxy & gateways apps