Honeypot canaries

Honeypot canaries (Pro, Site Protection > Hardening) plant traps only an intruder would spring: a self-tripping decoy file in images/ and a blocked decoy Super User account. Legitimate traffic never touches either — so any trip is evidence, not noise.

How it works

Plant each canary with one click; planting is the opt-in, there is no separate watch toggle. The scheduled check emails you the moment the file reports itself touched or anyone attempts to use the decoy account. The scanner skips the canary file (it would otherwise flag its own tripwire) and the decoy stays out of Protected Users management.

Joomla 3

Coming to the Joomla 3 edition with v3.0.0.