AI-Driven Deception Technology That Traps Attackers in Adaptive Decoy Environments

Founded in May 2015 as a spin-off of the Austrian security consultancy SEC Consult and headquartered in Vienna, CyberTrap Software GmbH builds deception technology for organizations that want to catch intruders already inside the perimeter. The company sells primarily to government agencies, internet infrastructure providers, and enterprises running their own security operations centers, positioning its work as a shift from reactive alerting toward active defense summarized by the internal maxim detect, deceive, trap, learn.

The Engage platform is organized into a discovery layer and an engagement layer. Explorer maps assets and behaviors across cloud and on-premises estates, while ThreatIQ combines internal telemetry with CVE analysis and dark web monitoring. Artifact Manager then seeds that mapped environment with fake credentials, breadcrumbs, and honey tokens in SaaS, DevOps, and endpoint paths. When a lure is touched, Deceptor spins up adaptive AI digital twins that mimic real systems, holding the intruder in synthetic infrastructure under observation.

Because decoy artifacts have no legitimate business use, any interaction is deterministic evidence of hostile activity rather than a statistical guess, which is the basis for the vendor's claim of roughly 95 percent fewer false positives. Rather than replacing existing controls, the platform sits alongside SIEM, SOAR, EDR, and NAC tooling through connectors for Splunk, Sentinel, CrowdStrike, Elastic, and QRadar. The company describes itself as a European market leader in deception, with leadership drawn from prior security exits and applied AI research.