Thinkst Canary

Deception devices and tokens that alert when attackers touch them, with very few false alarms.

Thinkst Canary sells small hardware and virtual decoys that sit on a network imitating servers, plus free canary tokens embedded in files and credentials. When an attacker interacts with one, the defender gets a high-confidence alert, since legitimate users have no reason to touch them. The South African company is bootstrapped and profitable.

Category

Threat Intel & DFIR

Founded

2015

Funding

Bootstrapped ($20M ARR, no VC)

Website

https://canary.tools

Seen at Black Hat USA 2026 (Silver Plus sponsor, booth 2767).

Outbound clicks are tokenized for directory analytics.