Thinkst Canary

Most companies only realise they are breached when informed by a 3rd party. This is a stupid problem! Thinkst Canary. Know. When it Matters.

[Thinkst Canary @ThinkstCanary]

This year we crossed $11M in ARR.

This is pretty unusual for a bootstrapped company, so we wrote down some thoughts on it:

https://t.co/LDETxRWZZG

[haroon meer @haroonmeer]

Agent meets Agent-Provocateur..

(https://t.co/63uOCbHDUH)

[Thinkst Canary @ThinkstCanary]

ThinkstCon 2026.. last year we had the whole company together welding.

This year it’s embroidery 💪💚🧵

[Thinkst Canary @ThinkstCanary]

@CharlieEriksen @haroonmeer 💪💚

[Botzero🛠 @botzero_net]

Canaries have been one of the absolute most useful tools for us at work. Looking forward to testing out Agent Provocateur!

[haroon meer @haroonmeer]

Our new “Agent Provocateur” deploys in minutes, lets you know when agents are running wild, and exploits “credulous clankers”.

Read how you too can get a reverse shell on autonomous attacking agents. 💪💚🤖

[haroon meer @haroonmeer]

I’m a little biased, but I think there might be something to this deception thing…

[Thinkst Canary @ThinkstCanary]

@timdavoren 💪💚🙏

[Thinkst Canary @ThinkstCanary]

AI/Agentic attacks have made headlines recently, but agents are highly "suggestible", allowing us to easily detect (or derail) them.

Our new "Agent Provocateur" deploys in minutes & works.

Read more here, including how to ask agents for reverse shells https://t.co/FTFJfIieNg

[Thinkst Canary @ThinkstCanary]

@sweepthatleg We are totally fans.. 💪💚

[Rob Ragan @sweepthatleg]

@ThinkstCanary Deception is about to be the highest ROI defense we have, for a boring reason: an agent can’t triage by smell. It resolves ambiguity by touching the thing. Planted creds don’t get opsec triage, they get used.

[Thinkst Canary @ThinkstCanary]

@0xdeeb 💪💚✊

[haroon meer @haroonmeer]

We never ambulance-chase, but there's a good reason that smart security teams have suggested honeypots and deception to detect agentic attacks.

Dead simple && Works!

https://t.co/7uNUHJBgDN

[Thinkst Canary @ThinkstCanary]

Last month:
🌍 free https://t.co/WCHU95kI8v were created in ~75% of the countries around the world;
🤯 a single (@ThinkstCanary) customer deployed >500,000 Canarytokens per hour (embedded in their workflows);
💪 we uncovered at least 1 major breach at an AI cloud infra provider

[MadeItHappen @MadeItHappenX]

@haroonmeer @fancy_4n6 I have been in those meetings. The diagram says isolated. The canary says otherwise. I trust the bird.

[Juliano Rizzo @julianor]

AI attackers have terrible OPSEC.
Use it against them.
Hallucinate exposed services. Waste their tokens. Seed prompt-injection traps, canaries, and honeytokens where attacker LLM will read them.
Have fun.

[haroon meer @haroonmeer]

You should absolutely watch this talk.

1) It is totally ok to not have a strong opinion 5 secs after it's done;
2) It's kinda great that the agents first created #hack & it all went wrong from there;
3) https://t.co/zMt6TdqnZH remains free - you should absolutely deploy tokens.

[Thinkst Canary @ThinkstCanary]

At BlackHat, and want to talk about detection that “just works” ?

Pop by our booth (2767) and find out why some of the best security teams in the world run @ThinkstCanary

[Thinkst Canary @ThinkstCanary]

Practically a home game 🔥🔥🔥💚💚💚💪💪💪

[Thinkst Canary @ThinkstCanary]

Our @haroonmeer with a post that is better than its cheesy title (promise!)

[haroon meer @haroonmeer]

I often try to convince hacker friends to start product companies (because hackers build cool things && building a company is mostly a series of hacks).

I read the Wright-Brothers biography & it reminded me of bits of company building i often gloss over:
https://t.co/ICIGOCXrBv

[Thinkst Canary @ThinkstCanary]

@CzeeBzee @thsottiaux @OpenAI Adding a warning to the token...

Sorry!

[Thinkst Canary @ThinkstCanary]

Attackers have inserted policy-violating text into malware to trip up agent-based analysis.

Defenders can use this too.

Enable "Guardrail Triggers" when creating Word & Excel tokens on (free) https://t.co/712OurVlda - your tokens will cause agents to bail.

Take it for a spin.