Beacon Setup

How to add the LobsterHoney beacon script to your website for AI agent detection.

The LobsterHoney beacon is a lightweight script tag that registers trap paths on your domain. Once deployed, it enables passive detection of AI agents visiting your site without any impact on performance or user experience.

The beacon is served from a neutral domain that looks like standard web infrastructure -- not from lobsterhoney.com. This keeps the detection layer invisible to visiting agents.

Adding the Beacon

Log in and navigate to Deploy

Open the dashboard and go to the Deploy page from the sidebar.

Select your hosting platform

LobsterHoney auto-detects your hosting platform when you add a domain. If detection is incorrect, you can manually select your platform from the picker. See Platform Detection for supported platforms.

Copy the generated script tag

The Deploy page generates a script tag tailored to your site. You can also copy an AI-ready prompt that your coding assistant can use to add the beacon automatically.

Add to your site's head section

Paste the script tag into your site's <head> section. The exact method depends on your framework -- the Deploy page provides platform-specific instructions.

Verify deployment

After deploying, run the verification check from the Deploy page to confirm the beacon is accessible and responding correctly. See Verifying Deployment for details.

The beacon is served from a neutral domain that resembles standard web analytics infrastructure. This prevents AI agents from identifying it as a honeypot based on the domain name alone.

What Happens After Deployment

Once the beacon is live, LobsterHoney begins monitoring for AI agent activity. When an agent interacts with a trap path, the beacon captures detection signals and sends them to your dashboard in real time.

You can monitor detections from the Dashboard Overview and investigate individual sessions in Threats Caught.