Frequently Asked Questions

A HoneyTrap is a decoy system that looks like a real server, workstation, or network service. It sits on your client's network waiting for someone to interact with it. Since no legitimate user has any reason to touch it, any connection is suspicious by definition. When an attacker probes the network, the HoneyTrap captures their activity and alerts you immediately - giving you early warning before they reach real systems.

No. The appliance is completely passive - it only responds when something connects to it. It doesn't inspect traffic, scan the network continuously, or sit inline with production systems. Think of it as a silent alarm that only activates when triggered.

For pre-configured hardware: plug in power and ethernet and the appliance auto-registers to your HoneyCloud portal within minutes. No on-site configuration needed. For self-imaged hardware: allow 20-30 minutes for initial setup including VLAN configuration on your firewall. If you order the pre-configuration service, your network settings are entered before the unit ships — your tech just plugs it in.

Yes. White-label branding is available on Professional and Enterprise tiers. Your logo on the portal, your branding on all reports and alerts, your company name on everything your clients see. No minimum quantities required — even a single appliance deployment can be fully white-labeled.

You get an instant alert via your preferred channel (email, Slack, RMM ticket, SMS). The AI analyzes the attack and provides a threat assessment with severity rating and recommended actions. Full session recordings let you see exactly what the attacker did. On paid tiers, you can automatically block the attacker's IP at the firewall and share the threat intelligence across all your client sites.

No. You can use your own hardware — any x86_64 mini PC running Ubuntu 24.04 works. We provide the software image. That said, our pre-configured Beelink EQi12 appliances save you setup time and ship ready to deploy at $799 one-time. Optional pre-configuration service ($299) means we enter your network settings, VLAN config, and firewall integration before it ships — your tech just plugs it in.

Antivirus and EDR protect endpoints by detecting known malware and suspicious behavior on those machines. HoneyTraps detect attackers who are already inside the network, probing for targets. They catch the reconnaissance phase before the actual attack. The two are complementary - EDR is your last line of defense, HoneyTraps are your early warning system.

No contracts. The free tier is free forever. Paid tiers are month-to-month - cancel anytime. We keep you by earning your business, not by locking you in.

RMM platforms (Atera, ConnectWise, Datto), EDR (SentinelOne, CrowdStrike), firewalls (FortiGate, UniFi), SIEM (Splunk, Elastic via Syslog), and Slack for alerts. API access is available for custom integrations.

When an attacker hits one of your client's HoneyTraps, that IP and attack pattern is immediately shared across all your other deployments. If the same attacker probes another client, you'll know it's part of a coordinated campaign. This turns your entire client base into a collective defense network.

All data is encrypted in transit and at rest. Each MSP tenant is fully isolated. Attack data is stored for your configured retention period (30-90 days depending on tier), then automatically purged. You own your data and can export or delete it anytime.

All tiers include email support. Documentation, API reference, and video tutorials are available at support.honeycloud.co. Enterprise customers get priority support with faster response times.

Absolutely. The live demo lets you explore the full dashboard with simulated attack data - no signup required. You can also start with the free tier using your own hardware to test in a real environment before committing to a paid plan or purchasing our appliances.

HoneyTrap Pro runs 22 simulated services across all paid tiers: SSH, Telnet, FTP, HTTP, HTTPS, SMB, RDP, VNC, MySQL, PostgreSQL, Redis, MongoDB, Elasticsearch, Modbus, S7, DNP3, MQTT, BACnet, SIP/VoIP, SNMP, Docker API, and Kubernetes API. Basic tier includes 16+ core services. Professional and Enterprise add ICS/SCADA and IoT protocols for industrial and healthcare environments.

Visit our Partner Program page to learn about reseller benefits including volume discounts, co-marketing support, and dedicated partner resources. We're actively recruiting MSPs who want to add deception technology to their security stack.

HoneyTrap Pro and HoneyCloud were designed and built entirely in-house by Cross Country Communications Corp. — a 25-year structured cabling, fiber, and managed services company based in Sulphur Springs, Texas. We built it because we needed it ourselves and couldn't find an MSP-focused honeypot solution at a reasonable price. Every feature came from real field experience. There's no third-party vendor behind it — when you contact support, you're talking directly to the people who wrote the code.

Yes. We have a full MSP Onboarding Guide covering deployment best practices, VLAN placement, HoneyCloud portal setup, white-label configuration, all integrations, and guidance on selling HoneyTrap Pro to your clients. Log in to your HoneyCloud account and find it under Resources, or email us and we'll send it directly.