Service Canary Logo service canary

Detect and react to user changes
within your infrastructure

Service Canary keeps an eye on your infrastructure and alerts you to changes. Get started in seconds with pip:

pip install canaryd
canaryctl init

Setup different alert notifications for each type of event. Send events via SMS, email, Slack and more.

Plugins for multiple event types in an open source client & daemon. Supports Linux, BSD and macOS.

Service canary plugins


Detect when users login, are added, removed or updated. Supported everywhere.


See firewall rule additions and removals. Supports iptables and firewalld.


Watch for new/removed services and changes in their status. Supports SysVinit, serviced, upstart and launchd.


Monitor changes to kernel versions and parameters via sysctl. Supported everywhere.


See when packages are added, updated or removed. Supports apt, yum and brew.


Get notified of service reboots, expected or unexpected. Supported everywhere.


See changes to running containers and virtual machines. Supports Docker, KVM and OpenVZ.


Keep track of the interity of important system files and identify bad actors immediately.


Keep track of core system load and raise warnings when CPU/Memory/Disk/Network overload.