The disruptive technology behind the best active defense tech on the planet.
CounterCraft The Platform™ goes beyond detection and monitoring to deliver a solution that detects threats faster, manipulates adversaries and generates usable intelligence, custom to your organization.
Our technology makes it easy to:
Design and build deception campaigns.
Automate and deploy with one button.
Manage and monitor incidents in real time.
Redirect adversaries, even with pre-programmed responses.
Access, manage and deliver the threat intel from one clear dashboard.
Get adversaries right where you want them (and away from where you don’t).
Custom or template-based CounterCraft breadcrumb technology that can be deployed across multiple endpoints, servers or even on internet based platforms such as PasteBin, GitHub and Shodan. Both passive and active breadcrumbs allow you to tailor them to attract exactly the adversary you are targeting. The main job of the ActiveLures is to attract adversaries into the CounterCraft ActiveSense Environments.
Realistic environments that offer full visibility on attackers’ every move.
ActiveSense Environments are the core of your CounterCraft deployment. They contain real machines and real services that provide a credible environment to deflect and monitor the adversary.
ActiveSense Environments are deployed quickly and controlled from the CounterCraft Platform. A wide range of host types and services are available, out of the box, to create an environment that is credible and makes the adversary think they have struck gold!
ActiveSense Environments combine the detailed telemetry collected by the DeepSense agents and the command and control capability of the CounterCraft ActiveLink network to provide a full, deep-sensing environment to collect and deliver all adversary activity in real time.
Cutting edge tech that delivers telemetry without detection.
How to gather telemetry unseen and undetected? The CounterCraft DeepSense agent is the key. The fully cloaked agent gathers all adversary activity on the deception host and sends it back to the CounterCraft ActiveConsole via the ActiveLink command and control network
Delivering ultra-credible human behavior without lifting a finger.
ActiveBehavior is a human interaction simulation tool that keeps a deception environment looking authentic via a fully automated set of processes, including logging in and performing “typical” user activities, or basic SysAdmin tasks.
ActiveLink provides a full command and control network for the ActiveSense Environment. It allows completely cloaked exfiltration of DeepSense telemetry and also allows real-time control over hosts, services and breadcrumbs for instant response to adversary activity. ActiveLink also allows the system to be deployed across a wide range of complex networks.
Your center for gathering real-time threat intelligence, specific to your organization.
The Deception Director is the heart of the CounterCraft Platform. The web-based console provides full design, deployment, and management functionality for all of the components, from ActiveLures deployment to automatic responses to detected adversary activity.
The Deception Director can be hosted locally or remotely and provides a powerful tool for analysis and alerting and active defense deployment.
Technology that fits neatly into your existing security stack.
The CounterCraft Platform plays nicely with other platforms. If you need to share threat intelligence or incident data with another platform, our many integrations make this easy. Whether it’s a SIEM, SOAR, Intel Sharing Platform or messaging service, the chances are it is already part of the CounterCraft third-party integration family.
If you can’t find your specific app, a fully documented RESTful API is available to make new integrations a breeze.
Are you ready for deception?
Wondering if deception is right for your organization? This ebook will give you everything you need to know to make an informed decision. Download it today to discover if you are ready for deception technology.
Nine pages designed to explain deception readiness.
A quiz to help you assess next steps.
An overview of low, medium and high maturity business profiles.
Contact information to get an in-person assessment if you desire.