.avif)
We're excited to announce Tracebit Community Edition, a completely free-forever platform to deploy security canaries.
Why We Built Community Edition
At Tracebit, we believe security canaries should be in the top 3 priorities for all new security programs. They represent one of the few high return-on-investment quick wins that implement 'assume breach' thinking, producing high-fidelity alerts while also impacting attacker behavior.
We’re launching Community Edition to deliver on this vision — we believe that by lowering the barrier further to high quality deception tech like security canaries, we can make this a true no-brainer all the way from security teams just starting out on their program through to home users who want a high fidelity signal in the event of compromise.
What’s included in Community Edition?
Our Community Edition feature set focuses on opening up some of our ‘Canary Credentials’ features as free-forever to everyone. These include:
- AWS Session Token Canaries
- SSH Key Canaries
- Browser Session Cookie Canaries
- Password Manager Credentials
- Email Canaries
- LLM Canaries
Deployed via the Tracebit Community CLI, these canaries will provide a breadth of coverage for a number of different attacks, instantly alerted to you via e-mail.
Sign Up Now
If you want to get started, sign up now at: community.tracebit.com
How do Community Edition Security Canaries help with today’s security threats?
If you’re still curious if Community Edition is relevant for you, let me dive into some of the recent threats that are front of mind for us at Tracebit at launch time.
AWS Keys and SSH Keys
In the recent Shai Hulud 2.0 supply chain attack, attackers compromised over 25,000 repositories by stealing AWS credentials, SSH keys, and GitHub tokens from developer machines and CI/CD pipelines. The malware executed during package installation, harvesting credentials from environment variables and configuration files.
How Tracebit helps: With Tracebit AWS and SSH key canary credentials deployed, if your environment were compromised in a supply chain attack, you would be alerted when those credentials are interacted with.
Browser Cookies & Login Credentials
According to CISA's advisory, the group Scattered Spider uses infostealers including Raccoon Stealer and VIDAR Stealer to harvest login credentials, cookies, and browser history from compromised devices. Scattered Spider have successfully targeted major organizations across a number of sectors including insurance, retail, technology and finance.
How Tracebit helps: Tracebit provides canary login credentials and browser cookies. If these are stolen and used by infostealers or threat actors, you’ll get alerted.
Email Account Compromise
In the Brickstorm espionage campaign, China-linked threat actors maintained access to victim environments for an average of 393 days. A common objective was accessing emails of key individuals including developers, system administrators, and individuals involved in matters aligned with economic and espionage interests.
How Tracebit helps: Tracebit enables you to create canary emails placed in your mailbox. If your mailbox is compromised and a canary email is interacted with, Tracebit triggers an alert.
Get started today
Deploy your first canary at community.tracebit.com.
