Getting started¶
Funnypot is a family of packages. Pick the one that matches how you want to run it — you don't need all of them.
1. Choose your entry point¶
=== "Existing PHP app"
Use the **embedder** — it wires the engine + a reputation client together with sensible defaults:
```bash
composer require metrictower/funnypot
```
Then see **[funnypot (embedder)](packages/funnypot.md)** for the call to add to your front
controller.
=== "Laravel"
```bash
composer require metrictower/funnypot-laravel
```
See **[funnypot-laravel](packages/funnypot-laravel.md)** for the middleware/service-provider setup.
=== "WordPress"
Install the **[funnypot-wordpress](packages/funnypot-wordpress.md)** plugin — see that page for the
install steps.
=== "Just the engine"
```bash
composer require metrictower/funnypot-core
```
See **[funnypot-core](packages/funnypot-core.md)** to drive detection + fake responses directly.
2. What you get¶
Once wired in, hostile-looking requests (scanner probes, exploit attempts) receive a believable, inert fake response instead of your real error page, and each attempt is surfaced to you as structured evidence — kind, severity, signals — that you can log, score, or report. Legitimate traffic is untouched.
3. Go deeper¶
- Turn observations into ban/allow decisions → funnypot-policy
- Check or contribute IP reputation → funnypot-mainnet-client
- Run a full standalone honeypot box → the honeypot app
Versioning
Every package depends on tagged releases and follows semver (currently 0.x while in active
build — a breaking change bumps the minor). Pin with a caret, e.g. ^0.6.