Fake systems laid out as bait. Nobody should touch them, so if someone does, you know there’s an intruder.
It deploys decoys that imitate servers, workstations and industrial equipment, and it plants lures on real systems. Touching a decoy raises a high-confidence alert, which can trigger blocking.
A decoy can reveal someone exploring the network, including an inmate who has reached a place they shouldn’t. Nobody has a reason to touch a decoy, so contact is a clear signal.
- Flags anyone probing the network.
- Very few false alarms.
- Places decoys on inmate-accessible networks to spot exploration.
- Decoys can mimic IT and OT devices.
- High-confidence alerts.
- Integrates with firewalls to isolate attackers.
| Control | Priority | How this helps |
|---|---|---|
| SI-4System Monitoring | P1 | Adds detection of attackers inside the network. |
| IR-4Incident Handling | P2* | Supports early response. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table