# Canary Tokens Breach detection honeypot tokens. Source: [Console review]() Website: [https://canarytokens.org/generate]() Profile updated: 2026-10-16 Category: [Vulnerability management]() ## Supported tech stack Research checked: 2026-10-11 ### Integrates with - Docker (Integration) Source: [Research source]() Documented compatibility; coverage may be incomplete. Written in describes implementation, not user-project language support. Canarytokens recommends Docker installation. ## Console’s review — 2023-01-26 Reviewed: 2023-01-26 Author: [David Mytton]() Citation: [This review]() ### What we like Generate honeypot files (Word, Excel, PDF, executables) and tokens (AWS) which send alerts when triggered e.g. when a file is opened or the API credentials are used. Also supports DNS record, MySQL dump and other types of honeypot tokens. Email or webhook URL notifications. Provides another layer of detection e.g. from malware scraping credentials from laptops. Free service. ### Tradeoffs Token types are more-or-less sufficient, but somewhat limited e.g. only supports AWS tokens (Slack tokens were deprecated). This review reflects Console’s assessment at publication on 2023-01-26. Features and limitations may have changed since the review date. ## Is Canary Tokens a fit? Based on [Console’s review published on 2023-01-26](). Summary updated: 2026-10-16 ### Who it’s for Security teams should consider Canary Tokens for breach detection ### Why consider it Canary Tokens can generate honeypot files and tokens that send alerts when triggered ### Keep in mind The tool has limited token types, only supporting AWS tokens [Selection criteria]() · [About Console]() · [Browse tools]()