Feasibility study
Environment analysis, requirements (use cases, functional and technical requirements, compliance), deployment options, TCO estimate, overlap with existing tools, input for tender documentation.
Target Five / Official Labyrinth partner
Labyrinth Deception Platform
Bait that calls hackers in.
Deception technology places convincing decoys across your network – fake servers, applications, databases, industrial devices and credentials. Legitimate users never touch them, so any interaction is almost certainly an attack. Labyrinth detects attackers who already passed the perimeter early in their lateral movement, with minimal false positives. As an official Labyrinth partner we cover the whole cycle: feasibility study, architecture, deployment, SIEM/SOC integration and operation.
Deployment consultationThe problem
01
The attacker is already inside.
Breaches are discovered after weeks or months.
02
The SOC is drowning in alerts.
A real attack gets lost.
03
Blind spots.
OT, legacy systems and segments without EDR stay unmonitored.
How it works
01
Analysis & design
Segments, critical applications, typical attacker paths.
02
Decoys (Points)
Convincing fake systems in each segment that mimic your environment, hosted on a Worker Node.
03
Breadcrumbs (Seeders)
Subtle lures on real workstations and servers (stored credentials, links, connections) that lead the attacker into the trap.
04
Detection & analysis
Every interaction with a decoy is recorded and analysed with MITRE ATT&CK mapping.
05
Response
A high-fidelity alert to SIEM/SOC and automatic isolation via NAC, firewall or EDR.
Key features
- Dozens of decoy types (Windows/Linux, databases, web, file services, OT/IoT)
- Planted credentials and links on endpoints
- Alerts with minimal false positives
- Recording of attacker techniques
- Integration with SIEM, SOAR, EDR/XDR, NAC and firewalls
- Scales from one segment to hundreds of branches
Packages & engagement options
Integration baseline
Platform deployment, SIEM/SOC integration, first segments.
Critical application domains
Decoys and breadcrumbs around your most valuable systems and data.
Full rollout
Extension to regions and branches.
Operation as a service
Decoy tuning, alert analysis, regular reporting.
Compliance
- NIS2 / Czech Cybersecurity Act: detection and logging of cybersecurity events
- ISO 27001:2022: A.8.16
FAQ
01
Will decoys affect operations?
No, they are isolated and users don't work with them.
02
Does it replace EDR/SIEM?
No, it complements them with a highly accurate detection signal.
03
How long does deployment take?
A pilot segment in weeks, full rollout in phases.