tripwire

Open Source Tripwire®

BusKill's main CLI/GUI app for arming/disarming/configuring the BusKill laptop kill cord

Deep learning based object tracking with line crossing and area intrusion detection

Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.

HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.

Find shortest path using Tripwire and Eve data.

AI-agent tripwires: inert MCP decoys and canary tokens detect compromise; a fail-closed guard contains the next guarded action.

Antiforensic actions to secure your device if it's physically stolen from you

A privilege escalation detection and prevention system for GNU/Linux hosts

HMAC-authenticated canary token generator and secret exfiltration leak detection sentinel

HMAC-authenticated canary token generator and secret exfiltration leak detection sentinel

Node.js SDK for bot detection and web scraping defense. Combines deterministic tripwire honeypots, local rate limiting and IP filtering rules, and JA3/JA4 TLS fingerprinting to catch stealth scrapers that beat browser fingerprinting. Framework middleware for Express, Fastify, and Next.js. TypeScript-first, fail-open.

Lightweight file integrity based - Host Intrusion Detection System (HIDS) built in pure Python3. Recursively enumerates directories, stores hashes of files, detects and logs file modifications.

Context injection for AI agents, triggered by the codebase itself

Create and monitor canary files for modification, movement, or deletion.

Boot2Root Honeypot

A read-only tripwire that watches Claude Code's local config and reports suspicious changes.

Trigger to close encrypted cryptomator volumes

A fork of Tripwire by Daimian Mercer, the EVE Online wormhole mapper, refit: brand packs so any corp can run it as their own (dark and light rooms), a phone install, paste signatures from anywhere, inline life/mass edits, a layout that holds still, and end-to-end tests.

Tool to verify integrity of the local source tarballs (or distfiles) by mirror network consensus