| Fidelis Deception |
Automated cyber terrain mapping; profiles and classifies assets and communication patterns |
Automatically creates, deploys, tests, and updates decoys to reflect environmental changes |
Network, endpoint, cloud/hybrid, identity, IoT/OT and other enterprise assets |
Fake accounts, planted credentials, deceptive data and breadcrumbs |
High-fidelity attacker activity and intelligence |
Standalone or integrated with Fidelis Elevate; deception signals enriched with network, endpoint, sandbox and threat context |
| Acalvio ShadowPlex |
Environment-aware deception; broad enterprise deployment |
AI-driven, autonomous deception designed to adapt in real time |
Identity, cloud, network, endpoint, OT/ICS; hybrid and multi-cloud |
Strong focus; deceptive privileged credentials and identity assets |
Threat and attacker intelligence |
Vendor-agnostic integrations with security operations tools |
| Fortinet FortiDeceptor |
Active/passive asset discovery, asset inventory and optimized decoy-placement recommendations |
Dynamic decoys; asset-matched deployment and on-demand deception deployment |
IT, OT, IoT/IoMT, cloud and network environments |
AD decoys, tokens and stolen-credential detection |
Detailed forensics; IOC and TTP collection |
Fortinet Security Fabric plus SIEM, SOAR, EDR, NAC and sandbox integrations |
| CounterCraft |
Creates controlled deceptive environments that mimic the organization’s operational landscape |
Customizable deception environments and scenarios |
On-premises, cloud and hybrid environments |
Not positioned primarily around identity deception |
Major focus: real-time adversary intelligence, TTPs, MITRE ATT&CK and IOC enrichment |
Threat intelligence and alerts can feed existing security workflows |
| Zscaler Deception |
Deception strategies can be configured around organizational requirements |
Configurable deployment of decoys and deceptive attack paths |
Public-facing endpoints, network, cloud and Active Directory |
Strong AD/identity deception capabilities |
High-fidelity threat intelligence from deception interactions |
Fits into Zscaler’s broader security/Zero Trust environment |
| Rapid7 InsightIDR Deception |
Uses intruder traps and deception assets rather than broad environment mapping |
Deploys honeypots, Honey Users, Honey Files, and Honey Credentials as deception traps |
Internal networks, endpoints, Active Directory, and AWS VPC environments |
Honey Users and Honey Credentials help detect credential harvesting, misuse, and identity-based attacks |
High-confidence alerts from interactions with deceptive assets, including reconnaissance and lateral movement activity |
Deception alerts integrate directly with InsightIDR detections and investigations |
| Commvault Threatwise |
Focused on deceptive threat sensors rather than broad environment mapping |
Rapid deployment and cloud-delivered deception |
IT, OT, network, on-prem, cloud and backup environments |
Not positioned primarily as an identity-deception platform |
Real-time insight into reconnaissance, lateral movement and active threats |
Closely integrated with cyber resilience, data protection, remediation and recovery |
