Have you heard about canary (or honey) tokens? In his latest Security Zines, Rohit Sehgal explains what they are and how they offer a smart solution for implementing intrusion detection in any system.
We are also pleased to introduce ggcanary, the easiest way to create ready-to-disseminate AWS-based canary tokens.
ggcanary is a fully open-sourced project using Terraform to manage your canary tokens infrastructure. Using well-known AWS components, it is ready to be deployed in minutes.
- Use Terraform to manage canary tokens infrastructure
- Deploy up to 5,000 canary tokens on your perimeter
- Track every action with AWS CloudTrails logs
- Get real-time email alerts when canaries are triggered
Start now! Create your first canary token with ggcanary...
Canary tokens can be used everywhere on your infrastructure to lure attackers:
- Source control systems (Git repositories)
- CI/CD systems
- Internal registries & package managers
- Production environments
- Other places in the supply chain
Want to learn about supply chain attacks and why intrusion detection can prove useful?
![](https://blog.gitguardian.com/content/images/2022/07/22W30-canary-tokens.png)
![](https://assets-global.website-files.com/5ee25cbe47310017adf964da/5f75d8b4378e687719a8255f_learning-center-og-gitguardian.png)
![](https://blog.gitguardian.com/content/images/2021/11/21W31-Blog-Banner-SAST-DAST-Final.jpg)
![](https://blog.gitguardian.com/content/images/2022/04/22W15-blog-SecurityZines-Compromising_CICD_pipelinesnal.jpg)
![](https://blog.gitguardian.com/content/images/2022/01/21W41-Blog-Banner-5-risks-CI-pipelines-1.png)