LobsterHoney Docs

Deploy AI agent honeypots, detect malicious automation, and capture intelligence with invisible tripwires.

Get StartedAPI Reference

Trap Types

Callback tokens, extraction tokens, and canary credentials -- three classes of traps for different intelligence goals.

Detection Scoring

Multi-signal scoring engine that classifies visitors with threat scores, confidence levels, and severity ratings.

API Reference

REST API for managing traps, querying sessions, and pulling analytics data programmatically.

Webhook Alerts

Real-time Slack notifications when AI agents are detected, with severity escalation and deduplication.

How Detection Works

Click any step to learn more

🔍
Agent VisitsAI agent crawls your site and hits a trap endpoint
ðŸŠĪ
Trap FiresHidden tokens are injected into the response
⚡
Tokens TriggerCallback, extraction, and canary tokens activate
📊
ScoringSignals are weighted and a threat score is calculated
🔔
AlertWebhook fires and incident appears in the dashboard

Quick Start

Test a trap endpoint to see detection in action:

$curl -v https://your-beacon-domain.com/s/your-org/robots.txt