minaki Sign up / Sign in

Shared defense

Attackers reuse the same addresses, tools and tricks across thousands of servers. When one Minaki server sees an attack, everyone's defenses can learn from it. This is how that will work, and exactly what is and is not shared.

We already watch live attacks

MinakiLabs runs a fleet of honeypot sensors that pose as ordinary Linux servers. They record real attacks and keep the malware attackers leave behind. That is where our checks and cures come from, and the counts on our home page and Caught this week are taken straight from those sensors. This part is working today.

The idea: one server's attack protects the rest

The same attacker address that hits one server will often try thousands more. If every Minaki server could contribute the plain signals of an attack it sees, the whole network could block that attacker before it reaches the next machine. Our sensors seed this today; as the suite grows, customers who choose to take part would add to it, and everyone's threat intelligence would stay current automatically.

Exactly what would be shared

If you opt in, a Minaki server would send only the signals that describe an attack:

  • The network address an attack came from.
  • The pattern of the attack, such as which service it targeted and how.
  • A fingerprint (a hash) of any malware file involved.

What is never shared

Never your files or their contents. Never your data, your customers' data, your passwords, keys or credentials. Never anything that identifies you or your business. We do not sell customer data to anyone, ever. We sell security, not your data.

Opt-in, off by default

Shared defense will be off until you turn it on. Before you can turn it on, we will show you in plain words exactly what leaves your server and what never does, and you will be able to turn it off again at any time. Nothing is shared from your server unless you have chosen it.

Where this is today

Our honeypot sensors already feed the protection every Minaki server gets — that part works today. Shared defense is the opt-in that would also let your own server add what it sees to that pool. It stays off by default, and nothing is shared from your server unless you turn it on. Before you can, we will show you in plain words exactly what leaves your server and what never does. The malware & server check makes no network connections at all; the rest of the suite is covered by our privacy page.