This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
krain
The honeypot solo devs can actually run and maintain
Krain is a lightweight open-source honeypot built for solo devs and small teams, not SOC teams. Host it once next to your real site and let it take the hits instead. It fakes an SSH login, a Grafana, and a full security console with PDFs and admin logins that lead nowhere. Touch the wrong file and you walk off with a planted AWS key that goes nowhere real. Scanners get stuck in tarpits: slow responses, endless directory listings, gzip bombs. Everything logs locally, no enterprise stack needed.
i've made this project nearly 1 year ago, but decided to finish it and clean and do some refactoring for the past two months
I run my own VPS, and after a few weeks it just starts getting poked. Constantly. Script kiddies, scanners, bots, crawlers, all hitting the box while the actual site sits quiet on 80/443. Enterprise honeypot platforms exist for this, but they assume you've got a SOC team watching dashboards all day. I don't, and I'm guessing most solo devs and small teams don't either.
So I built krain: a lightweight honeypot you host once, right next to your real site, that gives attackers something far more interesting to poke at than your actual app.
Here's what it does:
Fakes an SSH login, a Grafana dashboard, and a full fake security console
Plants fake secrets (AWS keys, etc.) that lead nowhere real
Tarpits scanners with slow responses, endless directory listings, and gzip bombs
Logs everything locally, no enterprise pipeline needed
Runs isolated in one small container, safe right next to production
It's not hack-back, it's not a shield, and it's not for crawling the internet. It's just bait that sits beside your site and keeps attackers busy instead of you.
I'd love your feedback, especially on deploy friction and what would make the decoys more convincing without making the whole thing heavier. I'll be around all day answering questions.
The tarpit idea is genuinely clever, turning scanners' own patience against them with slow responses and gzip bombs feels like a satisfyingly cheeky defense. Love that you made it accessible for solo devs instead of gating it behind enterprise complexity.
Love that this exists for small projects, the tarpit idea is genuinely clever. One thing I'd add: a simple Slack or Discord webhook for when a scanner trips a planted credential or hits the tarpit, so you actually notice the hits instead of digging through local logs later. Would make it way more useful day to day.
About krain on Product Hunt
“The honeypot solo devs can actually run and maintain”
krain was submitted on Product Hunt and earned 4 upvotes and 5 comments, placing #160 on the daily leaderboard. Krain is a lightweight open-source honeypot built for solo devs and small teams, not SOC teams. Host it once next to your real site and let it take the hits instead. It fakes an SSH login, a Grafana, and a full security console with PDFs and admin logins that lead nowhere. Touch the wrong file and you walk off with a planted AWS key that goes nowhere real. Scanners get stuck in tarpits: slow responses, endless directory listings, gzip bombs. Everything logs locally, no enterprise stack needed.
krain was featured in Software Engineering (42.8k followers), Developer Tools (517.5k followers) and Security (2.8k followers) on Product Hunt. Together, these topics include over 92.2k products, making this a competitive space to launch in.
Who hunted krain?
krain was hunted by Hema Omer. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how krain stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Hema Omer
Hey Product Hunt! 👋 I'm Hema, the maker of Krain.
i've made this project nearly 1 year ago, but decided to finish it and clean and do some refactoring for the past two months
I run my own VPS, and after a few weeks it just starts getting poked. Constantly. Script kiddies, scanners, bots, crawlers, all hitting the box while the actual site sits quiet on 80/443. Enterprise honeypot platforms exist for this, but they assume you've got a SOC team watching dashboards all day. I don't, and I'm guessing most solo devs and small teams don't either.
So I built krain: a lightweight honeypot you host once, right next to your real site, that gives attackers something far more interesting to poke at than your actual app.
Here's what it does:
Fakes an SSH login, a Grafana dashboard, and a full fake security console
Plants fake secrets (AWS keys, etc.) that lead nowhere real
Tarpits scanners with slow responses, endless directory listings, and gzip bombs
Logs everything locally, no enterprise pipeline needed
Runs isolated in one small container, safe right next to production
It's not hack-back, it's not a shield, and it's not for crawling the internet. It's just bait that sits beside your site and keeps attackers busy instead of you.
The project is open source
Code's here if you want to poke around: github.com/h3ma209/krain-sec
And the documentation and site's here: krain-sec.vercel.app
I'd love your feedback, especially on deploy friction and what would make the decoys more convincing without making the whole thing heavier. I'll be around all day answering questions.
Thanks for checking out krain! 🙏