Beelzebub

7.5easy start · #1 of 18
in Honeypot Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Linux, self-hosted.

Beelzebub is ranked #1 of 18 in honeypot software on The Geeks Club. It runs on API, Linux, Self-hosted. There is a free plan. A free trial is offered.

Beelzebub plans and pricing

All plans

Open source Free Core framework · self-hosted deployment beelzebub.ai · 30 Sept 2026

Compared on honeypot software

Free plan: Yes
Deployment model: self-hosted
Decoy scope: multi-layer
Credential lures: Yes
Cloud decoys: Yes

Best Beelzebub alternatives

See all 12

OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9 Dionaea 0 of 4 in the starter kit Lesson 76.7

The record

Purpose: Beelzebub deploys realistic decoys and canary credentials to detect attacker movement and provide investigation context to security teams.
Protocols: The platform supports decoys for HTTP, SSH, Telnet, MCP, and other protocols.
AI investigation: Specialized agents for triage, threat hunting, malware analysis, incident response, and reporting investigate decoy sessions.
Forensic reports: Each decoy session produces a plain-English summary of attacker actions, observed techniques, and captured artifacts linked to the original session.
Integrations: The platform routes structured events and investigation context through APIs and webhooks and lists SIEM, SOAR, identity, firewall, and cloud integrations.
Deployment: The maker says the platform can run with Docker or Kubernetes across cloud and on-premises environments, with local model options for restricted and air-gapped evaluation.
Security controls: Active testing can be limited to an approved scope, and exploitation requires human approval with evidence preserved for review.
Certifications: The site lists ISO 9001:2015 and ISO/IEC 27001:2022 certifications.
Framework mapping: The maker says findings can be mapped to MITRE ATT&CK, NIST CSF, ISO 27001, DORA, and NIS2.
Open-source option: The FAQ says the core framework is open source and can be self-hosted for free.
Trial: The FAQ says the managed platform includes a 14-day free trial with enterprise features.
Proof of concept: The maker offers enterprise customers a 30-day proof of concept with guided evaluation and dedicated technical support.
Support: The FAQ lists GitHub issues and documentation for community support, and 24/7 phone and chat support for enterprise customers.
Contact: The site gives a legal address of Via Giuseppe Ripamonti 190, 20141 MI.
Price from: Free

Where it ranks on The Geeks Club

Best Honeypot Software in 2026#1 of 18

Is Beelzebub yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Beelzebub

Sources

beelzebub.ai/products/beelzebub-cloud/· checked 30 Sept 2026
beelzebub.ai· checked 30 Sept 2026
beelzebub.ai/faq/· checked 30 Sept 2026