What it does
T-Pot combines multiple honeypots with visualization and analysis tools in an optionally distributed defensive research platform.
T-Pot is a dedicated deception deployment rather than a normal workstation utility. Its README lists at least 8-16 GB of RAM, 128 GB of free disk and an outgoing internet connection. It combines multiple honeypots with Elastic-based analysis and can distribute collection across supported architectures. Plan segregated placement, an event-retention limit and an owner before installing it. The purpose is to observe interactions against deliberately presented services, with storage and connectivity requirements sized for that role.
Strengths
- Integrated honeypot collection and visualization workflow
Watch out for
- The documented deployment has substantial memory and storage requirements
Best for
- Defensive research teams operating segregated honeypot infrastructure
Sources
- T-Pot - The All In One Multi Honeypot Platform (Oct 26, 2026)