← Knowledge base

3 min read · http · quickstart

Drop your first HTTP beacon in five minutes

Create an HTTP or web-image token, embed the URL, and confirm a test trigger.

In the dashboard, create an HTTP beacon or upload a decoy image. HorasEye gives you a unique /t/… URL (or a camouflaged clone-tripwire path).

Put that URL in a place only a curious process would load: an internal runbook screenshot, a “logo.png” next to fake credentials, or a document you generate from the token (HTML decoy opens reliably in browsers; PDF open-beacons need Adobe. See “Why PDF honeytokens often do not fire”).

Open the URL once yourself. You should see a pixel or image, and a trigger in Trigger History. If nothing appears, check that TRIGGER_BASE_URL / your tenant domain resolves, then retry.

Discuss this in the forum →