Resources

Resources

Practical guides to cyber deception, AI-agent security and threat intelligence, with deployment considerations, investigation methods and clear limits on what the evidence can show.

New: detecting rogue AI agents with cyber deception.

Detecting Rogue AI Agents with Cyber Deception

Learn how decoy credentials, documents, APIs and MCP surfaces can reveal suspicious AI-agent activity, what the evidence proves, and how to evaluate coverage.

AI agent security
rogue AI agents
cyber deception
decoy credentials
MCP security

What Is Active Defence in Cyber Security?

Active defence uses proactive, authorised security measures to reveal, contain, and respond to threats earlier. Learn what it includes and why it is not hack-back.

active defence
cyber deception
early warning
threat intelligence
cyber resilience
defensive security

Decoys vs Honeypots vs Honeytokens vs Canary Tokens

What is the difference between a decoy, a honeypot, a honeytoken, and a canary token? A practical guide to cyber deception terms, mapped to MITRE D3FEND.

cyber deception
decoys
honeypots
honeytokens
canary tokens
MITRE D3FEND

Cyber Deception Readiness Checklist

A practical readiness checklist for security teams considering cyber deception, active defence, high-confidence tripwires, and early-warning detection.

cyber deception
active defence
early warning
readiness checklist
insider threat
identity security
cloud security
threat intelligence

Identity-Led Deception for Cloud Credential Compromise

How decoy credentials, identities, access paths, and cloud resources can detect stolen cloud credentials before attackers reach real assets.

identity-led deception
decoy credentials
cloud credential compromise
MITRE Engage
MITRE D3FEND
MITRE ATT&CK
AWS
Entra ID
Snowflake
CI/CD security

FIRCY for AWS Environments

Use FIRCY Sense in AWS environments to detect suspicious interaction with decoy credentials, S3 paths, applications, workloads, and web controls.