Overview
Mockingbird is a plug-and-play honeypot and canary device designed to be dropped onto any network and forgotten — until something touches it. Running on a Raspberry Pi, it stands up believable decoy services and canary tokens that a legitimate user would never interact with, so any connection is a high-signal indicator of compromise. A lightweight FastAPI engine captures the interaction, classifies it, and pushes a real-time alert to a Next.js dashboard, giving defenders early warning of lateral movement and reconnaissance inside their perimeter.
Technologies
- - Python
- - FastAPI
- - Raspberry Pi
- - Next.js
- - WebSocket
Year
2026
Type
Hardware + Software Project
Role
Solo Developer
Highlights
Built a FastAPI detection engine that exposes decoy services and canary tokens, captures every interaction, and classifies it by intent.
Engineered the device to be truly plug-and-play — power it on, drop it on a subnet, and it begins listening with no configuration required.
Streamed live alerts over WebSocket to a Next.js dashboard so an intruder touching the canary is surfaced to the defender within seconds.