Correlate weak clues
Join bounded network, browser-automation, velocity, identity-context, and decoy evidence without pretending an IP address is a person.
Defensive deception · Early access
Catch attackers while they still think they areinvisible.
Honeypot R Us helps B2B teams plant believable decoys, correlate weak attack signals, and move suspicious actors through a reviewable response ladder—before production systems become the evidence.
Built for authorized defensive use. No irreversible action from one noisy signal.
Signal is evidence. Correlation makes it useful.
Honeypots create high-intent evidence. The surrounding platform adds context, policy, review, and a safe place to keep an attacker busy.
Offer believable wrong doors
Place synthetic services, credentials, routes, files, and workflows where legitimate users have no reason to go.
Contain without guessing
Escalate through expiring challenges and reversible quarantine before an isolated HNPT-owned playpen is ever considered.
A response ladder with an exit at every step.
Escalation stays bounded. Suspicion never skips directly to punishment, and the playpen is always isolated and HNPT-owned.
- ObserveCollect bounded evidence.
- CorrelateJoin signals by policy.
- ChallengeAsk for stronger proof.
- QuarantineLease reversible limits.
- PlaypenRoute only to owned isolation.
- ReviewRelease, extend, or block.
Capability, with honest delivery states.
The public roadmap takes cues from mature deception platforms while preserving HNPT's stricter quarantine and tenant-isolation model.
- Tenant-scoped event contracts
Typed ingestion, correlation, quarantine, review, playpen, and outcome records with PostgreSQL and CockroachDB portability.
Contract available - Reversible quarantine leases
Reasoned, expiring, idempotent actions with release requests and a complete audit trail.
Contract available - Session replay and artifact evidence
Bounded transcripts, command timelines, and malware-safe artifact references inspired by mature interactive honeypots.
In development - Multi-protocol deception packs
Deployable SSH, HTTP, database, cache, file-transfer, and custom banner decoys with explicit exposure policies.
Roadmap
Security is the product
Give attackers a convincing dead end.
Start with decoys and observation. Add reversible quarantine only after the review policy, blast radius, expiry, and release path are explicit.