Haroon Meer is back! Haroon is the Founder of Thinkst, the ~50-person bootstrapped company behind Canary and Canarytokens — honeypots and tripwires you sprinkle inside your network and forget about until an attacker touches one. We talk about the AWS API key token attackers just can’t resist trying, the real credit card token backed by an actual bank partnership, Breadcrumbs (their brand-new feature that leads intruders straight to your canaries), a live demo where a hardware Canary becomes a Synology NAS in one click, and how a company with zero outbound sales and no price increase in ten years quietly passed $22.5 million in ARR.
<a href="https://changelog.zulipchat.com/#narrow/stream/456187-interviews">Join the discussion</a><a href="https://changelog.com/++" rel="payment">Changelog++</a> members get a bonus 4 minutes at the end of this episode and zero ads. Join today!Sponsors:<ul><li><a href="https://buildkite.com/">Buildkite</a> – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
</li>
<li><a href="https://workos.com">WorkOS</a> – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at <a href="https://workos.com/">WorkOS.com</a> and <a href="https://www.authkit.com">AuthKit.com</a>
</li>
</ul>Featuring:<ul><li>Haroon Meer &ndash; <a href="https://thinkst.com" rel="external ugc">Website</a>, <a href="https://www.linkedin.com/in/haroonmeer" rel="external ugc">LinkedIn</a>, <a href="https://x.com/haroonmeer" rel="external ugc">X</a></li><li>Adam Stacoviak &ndash; <a href="https://adamstacoviak.com/" rel="external ugc">Website</a>, <a href="https://github.com/adamstac" rel="external ugc">GitHub</a>, <a href="https://www.linkedin.com/in/adamstacoviak" rel="external ugc">LinkedIn</a>, <a href="https://changelog.social/@adam" rel="external ugc">Mastodon</a>, <a href="https://x.com/adamstac" rel="external ugc">X</a></li></ul>Show Notes:<ul>
<li><a href="https://thinkst.com">Thinkst</a></li>
<li><a href="https://canary.tools">Thinkst Canary</a></li>
<li><a href="https://canary.tools/security">Thinkst Canary Security</a></li>
<li><a href="https://canarytokens.org/nest/">Canary Tokens</a></li>
<li><a href="https://docs.canarytokens.org/guide/">Canary Tokens Docs</a></li>
<li><a href="https://github.com/thinkst/canarytokens">Canary Tokens on GitHub</a></li>
<li><a href="https://github.com/thinkst/opencanary">OpenCanary on GitHub</a></li>
<li><a href="https://opencanary.readthedocs.io/">OpenCanary Docs</a></li>
<li><a href="https://techcrunch.com/2025/05/29/a-decade-in-bootstrapped-thinkst-canary-reaches-20m-in-arr-without-vc-funding/">TechCrunch: A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding</a></li>
<li><a href="https://grafana.com/blog/canary-tokens-learn-all-about-the-unsung-heroes-of-security-at-grafana-labs/">Grafana Labs: Canary Tokens, the unsung heroes of security</a></li>
<li><a href="https://canary.tools/love">Canary Love</a></li>
</ul>
Something missing or broken? <a href="https://github.com/thechangelog/show-notes/blob/master/podcast/the-changelog-683.md">PRs welcome!</a>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Canary tokens and digital tripwires (Interview)

The Changelog: Software Development, Open Source (via Backfeed)

AI Chapters

AI Insights

Reviews