Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates the setup, rotation, and teardown of honeytokens and fake API endpoints, and uses eBPF to detect, log, and forward alerts when your traps have been accessed.

93 stars 9 forks 93 watchers Go GNU Affero General Public License v3.0
cyber-deception ebpf honeypot honeytoken kubernetes-operator
1 Open Issue Need Help Last updated: Jul 11, 2026

Open Issues Need Help

View All on GitHub

Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates the setup, rotation, and teardown of honeytokens and fake API endpoints, and uses eBPF to detect, log, and forward alerts when your traps have been accessed.

Go
#cyber-deception#ebpf#honeypot#honeytoken#kubernetes-operator