FAQs
Questions? Answered.
What is Advanced Threat Diversion?
Advanced Threat Diversion lures attackers away from your real assets into isolated decoy environments. There, their tactics, techniques and procedures (TTPs) can be observed safely — without impacting your business processes — and turned into intelligence that strengthens your defenses.
How is Cybertrap different from a honeypot?
Traditional honeypots are static, low-interaction port listeners. Cybertrap combines contextually placed lures, breadcrumbs and honey tokens with an AI-powered digital twin that mirrors your infrastructure and adapts its complexity in real time to the attacker’s skill level.
Does Cybertrap replace my SIEM, SOAR or EDR?
No. Cybertrap makes your existing tools smarter. It delivers structured, high-confidence alerts into platforms such as Splunk, Microsoft Sentinel, CrowdStrike, Elastic and QRadar, and can trigger automated playbooks in your SOAR.
How quickly can Cybertrap be deployed?
Cloud deployments take less than 30 minutes, hybrid deployments about one day, and air-gapped deployments three days or less.
Will decoys interfere with production systems?
No. Threats are diverted into isolated environments that run alongside your infrastructure. Legitimate users have no reason to touch decoys, which is exactly why any interaction is such a strong signal.
How does Cybertrap reduce false positives?
Interaction with a decoy or honey token is, by design, a high-confidence indicator of malicious intent. Combined with AI-based anomaly detection and adversary profiling, this cuts false positives by more than 95%.
Which compliance frameworks does Cybertrap support?
Cybertrap logs all malicious activity in detail and provides structured evidence that supports ISO 27001, NIS 2, DORA and GDPR requirements for forensics, audits and incident reporting.
Who is Cybertrap built for?
Security operations teams in the public sector, critical infrastructure, healthcare, financial services and manufacturing. It is also an excellent tool for red, blue and purple teams to identify their attack surface and implement best practices for cyber hygiene.
Can Cybertrap run fully on-premises?
Yes. Cybertrap supports cloud, hybrid, on-premises and fully air-gapped deployments.
Didn’t find what you were looking for? Contact us
Ready to turn your SOC from reactive to relentlessly proactive?
Book a no-pressure call with a cybersecurity strategist. No jargon, no hard sell — just clarity.