Deception Check

Deception Check is a cybersecurity company that develops AI-powered adaptive honeypot technology designed to detect network intruders by emulating real systems. The product is built for small security teams, utilities, and municipalities that lack dedicated security operations centers. The core product deploys decoy systems that simulate SSH, HTTP, Telnet, SMB, and SCADA-Modbus protocols — including operational technology (OT) protocols common in industrial and utility environments. Unlike traditional static honeypots, the platform uses a local AI model to improvise realistic responses in real time, making decoys harder for attackers to fingerprint. The system is designed to operate fully air-gapped and on-premises, making it suitable for ITAR, CMMC, and OT-regulated environments. Key capabilities include: - Automatic mapping of attacker activity to MITRE ATT&CK framework - Output in STIX 2.1 / TAXII format for SIEM integration within 60 seconds - An attacker classification system called the "Bestiary," which categorizes observed threat actors into archetypes based on behavior - A research fleet that captures real adversary traffic, used to validate detection logic and publish threat intelligence The company also maintains a public research blog covering active CVE exploitation and threat trends, drawing on data from its own honeypot fleet. Pricing starts at $99/month. Two additional products are in development: "Arcana Check" (compliance and governance) and "Initiative Check" (tabletop incident response training), forming a broader platform aimed at resource-constrained security teams.