Trapster Documentation

Appearance

Cloud Deployment Enterprise ​

Trapster Enterprise can run in cloud environments. Deploy as a VM or container within a VPC/VNet, on a subnet where you want honeypot coverage.

Azure ​

Deploy on Azure ​

  1. Open Trapsters → click the + card → Deploy a new Trapster
  2. Click Microsoft Azure : follow the in-wizard instructions (contact support@trapster.cloud with your Azure tenant ID and target regions to access the image)
  3. Deploy to the VNet and subnet where you want honeypot coverage
  4. Accept registration when the Trapster appears in your dashboard (within a few minutes)

See Deployment overview for the full wizard flow.

Networking ​

  • Allow outbound HTTPS (port 443) to <domain_id>.trapster.cloud in your NSG
  • Place the Trapster on an internal subnet, it does not need a public IP
  • Inbound rules for honeypot ports are handled automatically based on your service configuration

AWS ​

Coming soon

AWS deployment is not yet available. Support is in progress.

Google Cloud Platform ​

Coming soon

GCP deployment is not yet available. Support is in progress.

General cloud recommendations ​

  • Do not assign a public IP unless you specifically want to catch internet-facing attackers
  • Place the Trapster on the same subnet as workloads you want to protect: lateral movement is the primary threat model
  • Allow outbound 443 only: the Trapster has no inbound management interface
  • For multi-region coverage, deploy one Trapster per region/VPC

Next steps ​