Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them.