tripwire

Open Source Tripwire®

BusKill's main CLI/GUI app for arming/disarming/configuring the BusKill laptop kill cord

Deep learning based object tracking with line crossing and area intrusion detection

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.

Find shortest path using Tripwire and Eve data.

AI-agent tripwires: inert MCP decoys and canary tokens detect compromise; a fail-closed guard contains the next guarded action.

Antiforensic actions to secure your device if it's physically stolen from you

A privilege escalation detection and prevention system for GNU/Linux hosts

HMAC-authenticated canary token generator and secret exfiltration leak detection sentinel

HMAC-authenticated canary token generator and secret exfiltration leak detection sentinel

Node.js SDK for bot detection and web scraping defense. Combines deterministic tripwire honeypots, local rate limiting and IP filtering rules, and JA3/JA4 TLS fingerprinting to catch stealth scrapers that beat browser fingerprinting. Framework middleware for Express, Fastify, and Next.js. TypeScript-first, fail-open.

Context injection for AI agents, triggered by the codebase itself

Lightweight file integrity based - Host Intrusion Detection System (HIDS) built in pure Python3. Recursively enumerates directories, stores hashes of files, detects and logs file modifications.

Boot2Root Honeypot

Create and monitor canary files for modification, movement, or deletion.

A read-only tripwire that watches Claude Code's local config and reports suspicious changes.

CanaryProbe 诱饵探针：给你读不到源码的闭源 coding agent 埋下诱饵主机名和假凭证，一旦二进制去解析或连接它，就在运行期立即告警并留下审计证据 —— 把「它有没有偷偷外联」从一次次反编译，变成一个可核验的 yes/no 事件。

A fork of Tripwire by Daimian Mercer, the EVE Online wormhole mapper, refit: brand packs so any corp can run it as their own (dark and light rooms), a phone install, paste signatures from anywhere, inline life/mass edits, a layout that holds still, and end-to-end tests.

Trigger to close encrypted cryptomator volumes