Customer Portal — PFS HoneyStack

Dashboard

Your HoneyStack subscription at a glance

// plan

—

// status

—

// services

—

active simultaneously

// sensor nodes

—

distributed mode

License Key —

Validated

—

Renews

—

Machine

Not locked yet

Quick Actions

✉ Contact support

My License

Your license key and capability details

License Key keep this secure

Add this to your .env file on your HoneyStack server as LICENSE_KEY=

—

Capabilities —

Capability	Status	Detail
Loading...

Machine Lock fingerprint-based

Your license is locked to the first server it validates from. If you migrate to a new server, contact support to reset the machine lock.

Current machine fingerprint

—

Docker Access

GitHub Container Registry token for pulling HoneyStack images

🐳

Request Your Docker Access Token

HoneyStack images are hosted on a private registry. You need a GHCR token to pull them. Click below to receive your token instantly — it will be shown here and sent to your email.

Free accounts get read-only access to pull images. Token is valid while your account is active.

📖 For the full deployment walkthrough — authenticating, downloading files, and starting the stack — see the in the sidebar.

GHCR Pull Token read-only · package access only

Use this token to authenticate with ghcr.io and pull HoneyStack images. Scoped to read-only package access only.

ghp_••••••••••••••••••••••••••••••••••••••

echo YOUR_TOKEN | docker login ghcr.io -u pfshoneystack --password-stdin

📖 Full deployment steps — downloading files, configuring your environment, and launching the stack — are in the .

Token Details

Property	Value
Registry	ghcr.io/pfshoneystack
Permissions	read:packages only
Expires	—
Auto-revoked on cancellation	Yes

⚠ Security Notice

Treat this token like a password. Do not share it, commit it to version control, or paste it in any chat or support ticket. Store it only in your server's .env file. If you believe it has been compromised, contact support immediately for a replacement.

Setup Guide

Get HoneyStack running in under 5 minutes

Prerequisites

Docker 24+ and Docker Compose v2 installed
Linux host — Ubuntu 22.04 LTS recommended
Root access or Docker group membership
Ports 80, 443, 8080 available (and your chosen service ports)

Installation Steps

Get your Docker access token

HoneyStack images are hosted on a private registry. You need a GHCR token to pull them. Go to Docker Access in the sidebar and click Request Docker Access Token — it will appear on screen and be sent to your email instantly. Pro/Enterprise customers receive it automatically in their welcome email.

echo "YOUR_GHCR_TOKEN" | docker login ghcr.io -u pfshoneystack --password-stdin

Download the required files

Download the docker-compose.yml and env.example directly from pfshoneystack.io — no GitHub account needed.

curl -LO https://pfshoneystack.io/static/docker-compose.yml curl -LO https://pfshoneystack.io/static/env.example

Configure your environment

Copy env.example to .env and set the required values. Your license key is pre-filled — do not share it.

cp env.example .env nano .env # ── Required ────────────────────────────────────────── LICENSE_KEY=HS-PRO-XXXX-XXXX-XXXX-XXXX HS_LICENSE_SERVER=https://license.pfshoneystack.io/v1/validate # Your management IP — prevents locking yourself out of SSH ADMIN_CIDRS=YOUR_IP/32 # Generate a strong password for the database POSTGRES_PASSWORD=use_a_strong_random_password POSTGRES_USER=hpuser POSTGRES_DB=honeypot DATABASE_URL=postgresql+psycopg2://hpuser:YOUR_PASSWORD@hp-postgres:5432/honeypot # Generate with: python3 -c "import secrets; print(secrets.token_hex(32))" FLASK_SECRET_KEY=generate_a_random_64char_hex # ── Optional — LLM for AI-powered decoys ────────────── LLM_PROVIDER=openai OPENAI_API_KEY=sk-... # or GEMINI_API_KEY / ANTHROPIC_API_KEY

Deploy the stack

Start all containers. Docker pulls the images automatically. On first run this may take 3-5 minutes depending on your connection speed.

docker compose up -d # Watch startup logs docker compose logs manager -f # You should see: # [license] Validated OK — tier=pro limit=10 # * Running on https://0.0.0.0:8080

Open the dashboard

Navigate to your server IP on port 8080 in your browser. Accept the self-signed certificate warning. Default login is admin / admin — you will be forced to change the password on first login.

https://YOUR_SERVER_IP:8080 # Default credentials (change immediately): # Username: admin # Password: admin

Start honeypot services

From the dashboard, go to the Services panel and click Start on each honeypot you want active. Free tier: up to 5 simultaneously. Pro/Enterprise: all services. Each service begins capturing attacker traffic immediately.

# Recommended starting services: # SSH (port 22→2222) — highest attacker traffic # HTTP (port 80) — web scanners and bots # FTP (port 21) — credential spraying # Telnet (port 23) — IoT botnet traffic # SMTP (port 25) — spam relay attempts

Verify it is working

Within minutes of exposing your server to the internet, attackers will start hitting your honeypots. Watch the live event stream on the dashboard. Each event shows the attacker IP, service, and MITRE ATT&CK classification.

# Check all containers are healthy docker compose ps # View live events docker compose logs manager --tail=50 -f # Or open the dashboard → Events tab for the full stream

Billing

Manage your subscription and payment method

Current Plan

—

Next Payment

—

Payment Method

💳

—

Upgrade Plan

Pro

5 sensor nodes, all 10 services

£29/mo

Enterprise

Unlimited nodes, SSO, audit logs

£149/mo

Danger Zone

Cancel subscription

Your license and Docker access will be revoked at the end of the billing period. A 72-hour grace period applies.

Profile

Manage your account details

Account Details

Full Name

Change Password

Current Password

New Password

Confirm New Password

Two-Factor Authentication

Email MFA

Get a 6-digit code by email on every login. Protects against brute-force and credential stuffing.

API Settings

Update integration credentials without redeploying the server

Stripe Configuration payment processing

Secret Key (sk_live_...)

Webhook Secret (whsec_...)

Pro Monthly Price ID

Pro Annual Price ID

Enterprise Monthly Price ID

Enterprise Annual Price ID

Resend Email transactional email

Resend API Key (re_...)

From Email Address

GitHub Docker Pull Token sent to all paying customers

This token is included in every welcome email. Update it here if you rotate the GitHub PAT. The new token will be used in all subsequent purchases — existing customers keep their current token until they next log into the portal.

GHCR Pull Token (ghp_...)

⚠ Important Notes

Settings are stored securely in the database — no server restart needed
Stripe keys take effect immediately on the next checkout or webhook
Leave a field blank to keep the current value — blank = no change
After updating Stripe webhook secret, test with a £0 trial or Stripe CLI
After updating the GHCR token, verify it works: docker login ghcr.io

Admin Dashboard

Customer overview & management

—

All Customers

—

Active

—

Past Due

—

Cancelled

—

Free

—

Pro

—

Enterprise

// Tier Distribution

// Monthly Signups

Email	Name	Tier	Status	Verified	License Key	Joined	Actions
Loading...

Customer

Name

Joined

Renews

License Key

Tier

Status

Email verified

Admin access

Create Admin Account

Full Name

Email Address

Password

Permissions

View Customers Create Users Generate Licenses Revoke Users Reset Machine Lock API Settings

Create Customer Account

Full Name

Email Address

Password

Tier