🐞
Web Bug (URL)
Alert when someone opens a secret link.
↪️
Fast Redirect
Alert, then send the visitor to a real site.
🐢
Slow Redirect
Alert + collect full browser fingerprint, then redirect.
🔳
QR Code
Alert when your QR code is scanned.
🖼️
Web Image / Pixel
Alert whenever an image is viewed.
📄
Microsoft Word
Alert when a Word document is opened.
📊
Microsoft Excel
Alert when an Excel document is opened.
📱
Fake App (PWA)
Alert when a fake app is opened on a device.
🧬
JS Cloned Website
Alert (JavaScript) when your site is cloned.
🎨
CSS Cloned Website
Alert (CSS only) when your site is cloned.
🍯
Honey API Key
Alert when a planted API key is used.
🗝️
Fake .env File
Alert when planted app secrets are used.
🔐
Decoy Admin Login
Alert + capture usernames on a fake login page.
🤖
robots.txt Canary
Alert when a scanner visits a hidden path.
🔗
Fake Webhook URL
Alert when a planted Slack/Discord webhook is used.
📅
Calendar Invite (.ics)
Alert when a planted event link is opened.
🤖
AI / LLM Key
Alert when a planted AI API key is used.
PHASE 2🌐
DNS
Alert when a DNS name is resolved.
PHASE 2🐬
MySQL Dump
Alert when a fake DB backup is restored.
PHASE 2🗄️
MS SQL Server
Alert when a fake SQL table is read.
PHASE 2📁
Windows Folder
Alert when a folder is browsed.
PHASE 2⚡
Sensitive Command
Alert when a suspicious command runs.
PHASE 2💥
Log4Shell
Alert when a Log4j logline is vulnerable.
PHASE 2📕
Acrobat Reader PDF
Alert when a PDF is opened in Acrobat.
PHASE 2🔑
AWS Keys
Alert when fake AWS keys are used.
PHASE 2☸️
Kubeconfig
Alert when a fake Kubeconfig is used.
PHASE 2🔒
WireGuard VPN
Alert when a fake VPN config is used.
PHASE 2🖥️
Fake SSH Key
Alert on login attempt with a planted key.
PHASE 2₿
Crypto Wallet
Alert when a watched wallet balance moves.
×
How NOAH works
1. Pick a token type.
2. Add a memo + your email.
3. We give you a link, image, file snippet or fake key.
4. Plant it somewhere only an intruder would touch.
5. The second anyone triggers it, you get an email with their IP, location, device and more.
Phase-2 tokens (DNS, Windows folder, AWS, etc.) need extra server setup and are coming soon.