unsubbed.co

beelzebub

Beelzebub is a self-hosted networking & VPN tool that provides honeypot framework designed to provide a highly secure environment for detecting and analyzing.

Overview

A secure low code honeypot framework, leveraging AI for System Virtualization. Traditional security fails when attackers are already inside. Beelzebub delivers full-stack AI deception across your entire infrastructure Kubernetes clusters, APIs, AI agent tools, IoT devices. Catching lateral movement with zero false positives, slashing MTTR from hours to seconds, and cutting SOC costs by 60%.

Key Features

Source: GitHub README

  • Low-code configuration: YAML-based, modular service definition
  • LLM integration: The LLM convincingly simulates a real system, creating high-interaction honeypot experiences, while actually maintaining low-interaction architecture for enhanced security and easy management
  • Multi-protocol support: SSH, HTTP, TCP, TELNET, MCP (detect prompt injection against LLM agents)
  • Prometheus metrics & observability: Built-in metrics endpoint for monitoring
  • Event tracing: Multiple output strategies (stdout, RabbitMQ, Beelzebub Cloud)
  • Docker & Kubernetes ready: Deploy anywhere with provided configurations
  • ELK stack ready: Official integration available at Elastic docs

Getting Started

Source: GitHub README

You can run Beelzebub via Docker, Go compiler(cross device), or Helm (Kubernetes).

Normalized Features

Source: tool-features-normalized.json

ai integration, docker, docker compose, elasticsearch, helm, kubernetes, metrics, mobile app, mysql, plugins, postgresql, rest api.

Features

Integrations & APIs

  • Plugin / Extension System
  • REST API

AI & Machine Learning

  • AI / LLM Integration

Analytics & Reporting

  • Metrics & KPIs

Mobile & Desktop

  • Mobile App