Security research, threat intelligence insights, and product updates.
SikkerGuard is getting a local web dashboard, a first-run setup wizard, and the architecture to pull threat intelligence from multiple sources, not just SikkerAPI. Here's what we're building and why.
SikkerGuard now supports user-managed blacklist files with CIDR range expansion, a persistent stats endpoint for dashboard integrations, and local SQLite tracking of blocked connections. Bring your own blocklists, monitor your firewall from any dashboard, and keep stats across restarts.
Our honeypot network captured an SSH attacker methodically appraising what it believed was a high-value GPU workstation. 55 commands in 100 seconds: hardware benchmarks, credential harvesting, and a paranoid honeypot detection sweep across six frameworks. It checked for Cowrie, Kippo, Dionaea, and more. Every check came back clean. The machine doesn't exist.