Skip to content
HoneyLabs logo

HoneyLabs

Queries captured honeypot traffic by source address, port, CVE or payload, and exposes the results over an API and MCP server.

Free plan · From ≈ $32/moActively maintained

HoneyLabs: data, price, alternatives
  • Is it safe? What HoneyLabs says it does with your chats and data, from its own policy pages.See ↓
  • Is it free? Free plan · From ≈ $32/mo · pricing page, read Oct 26, 2026See ↓
  • What else does this? We have not measured alternatives for this one yet. If you know one, add it below.See ↓
At a glancechecked Oct 26, 2026

not read yet

Use

For
SOC and security teams who want honeypot threat intelligence in their SIEM, MISP, or AI assistant
Price
Free plan · From ≈ $32/mo€29 · pricing page, read Oct 26, 2026
Activity
Actively maintainedsite updated 9 days ago
Company
since 2025per their site
How it runs
API
Used for
  • check an IP address or network against captured attacker activity
  • push captured scanning and login data into existing SIEM tools
  • ask an AI assistant which commands attackers ran on sensors
read off honeylabs.net on Oct 26, 2026
Worth knowingcomputed from what we read · each with its source
Pricingpricing page, read Oct 26, 2026
The companyeach fact with its source · read Oct 26, 2026
Your datawhat they publish, each line with its page · read Oct 26, 2026

These are HoneyLabs's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read Oct 26, 2026
  • MCP servernet.honeylabs/mcpverified in the MCP registry
  • Stateanswers, 14 toolschecked 2026-10-26
  • Address to connectmcp.honeylabs.net/mcp
  • OpenAPI spec12 pathsthe spec ↗
  • MCP docshoneylabs.net/mcpthe vendor's page ↗

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use HoneyLabs for?

Sign in to leave a note
Questions this page answers
  • What is HoneyLabs?

    Queries captured honeypot traffic by source address, port, CVE or payload, and exposes the results over an API and MCP server.

  • Who is HoneyLabs for?

    SOC and security teams who want honeypot threat intelligence in their SIEM, MISP, or AI assistant

  • How much does HoneyLabs cost?

    HoneyLabs has a free plan; paid plans start at ≈ $32/mo (€29/mo), per its pricing page on 2026-10-26.

  • Is HoneyLabs free?

    Yes, HoneyLabs has a free plan, per its pricing page on 2026-10-26.

  • Do people use HoneyLabs?

    Little sign of use.

  • Is HoneyLabs still maintained?

    Actively maintained: site updated 9 days ago.

  • Is HoneyLabs safe?

    We do not audit vendors. What HoneyLabs publishes, read 2026-10-26: GDPR stated on its privacy policy.

  • How do I cancel HoneyLabs?

    In its own words (terms of service, 2026-10-26): “You can cancel at any time from the billing portal on your dashboard.”

  • Does HoneyLabs give refunds?

    In its own words (terms of service, 2026-10-26): “Cancelling stops the next renewal, and the plan stays active to the end of the period you paid for, without a refund for that period.”

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk