Deception technology for small business buyers
Asked as “deception technology platform”, and as “honeypot and decoy tool”, on behalf of a small B2B company. 50 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the October 2026 Edition on October 4, 2026; its answers are read by the distilled judge (ai-indexes-judge-qwen3-14b-run3), not the claude-opus-5 judge of the earlier categories: how the two compare.
Standing · first-choice share
30%
Contested · OpenCanary 18%
30Thinkst Canary18OpenCanary10HoneyWire42others
30% of first choices, contested.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a small B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrant
Show the four products at 0%, ordered by negative rate
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
Head to head
All twenty-one head-to-head pages: the top seven products, each against each
Thinkst Canary vs Fortinet FortiDeceptorThinkst Canary vs T-PotThinkst Canary vs Illusive NetworksAcalvio ShadowPlex vs TracebitAcalvio ShadowPlex vs OpenCanaryAcalvio ShadowPlex vs Fortinet FortiDeceptorAcalvio ShadowPlex vs T-PotAcalvio ShadowPlex vs Illusive NetworksTracebit vs OpenCanaryTracebit vs Fortinet FortiDeceptorTracebit vs T-PotTracebit vs Illusive NetworksOpenCanary vs Fortinet FortiDeceptorOpenCanary vs T-PotOpenCanary vs Illusive NetworksFortinet FortiDeceptor vs T-PotFortinet FortiDeceptor vs Illusive NetworksT-Pot vs Illusive Networks
Recommended versus criticized
Every product with at least 10 labels here, on both axes. The 30% line names a quadrant, not the verdict above: that one needs more than 40%.
Criticized challengerCriticized default
Negative label rate →
01O02
03
04M05
06C07
T08
09Accepted challengerEndorsed leader
0%First-choice share → · lines at 30% share and 25% negative50%
Key
01Thinkst Canary30%
Thinkst Canary30%02OpenCanary18%
03HoneyWire10%
HoneyWire10%04Trapster6%
Trapster6%05Morphisec2%
06Tracebit0%
Tracebit0%07Cowrie0%
08T-Pot0%
09Acalvio ShadowPlex0%
Acalvio ShadowPlex0%What they warned about
Two of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, Perplexity Sonar, Grok 4.1 Fast, Mistral Small, DeepSeek V4 Flash, Llama 4 Maverick, Qwen 3.7 Flash, GLM 4.7 FlashX, MiniMax M2.5, GPT-6 Luna and Muse Glimmer 30B changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
T-Pot
50%
8 of 16 labels negative · 8 of 14 models · 3 hard negative
“Why to avoid: While "free" open-source software is tempting, self-hosting a honeypot on a production network is incredibly risky.” Gemini 3.5 Flash, negative prompt
Acalvio ShadowPlex61%
11 of 18 labels negative · 6 of 14 models · 3 hard negative
“you should avoid heavy enterprise-grade deception platforms (such as Acalvio ShadowPlex or SentinelOne Attivo)” Gemini 3.5 Flash, budget prompt
Illusive Networks
83%
5 of 6 labels negative · 4 of 14 models · 1 hard negative
“What to avoid: Enterprise solutions like Acalvio ShadowPlex or Illusive Networks” Kimi K2, budget prompt
FortiDeceptor
71%
5 of 7 labels negative · 4 of 14 models
“platforms like **Acalvio** or **FortiDeceptor** may be more appropriate, but they appear better suited to larger or more complex environments” Perplexity Sonar, direct prompt
What they cite
Citations exist only for the models that return a source list: fourteen of the fourteen in this edition, and all six flagship models on the expanded tier.
Sites the answers cite
76 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 1023 links across 229 sites, every framing counted. Ranked by the number of answers carrying the site or page. None of the 252 answers across every segment cited this index's own page for the category.
vendor site · SourceForge45 answers · 83 citations · 11 models
vendor site · Guideflow34 answers · 34 citations · 10 models
33 answers · 34 citations · 12 models
30 answers · 38 citations · 11 models
28 answers · 28 citations · 12 models
vendor site · FitGap25 answers · 29 citations · 9 models
vendor site · Acalvio22 answers · 33 citations · 10 models
22 answers · 31 citations · 10 models
21 answers · 26 citations · 9 models
20 answers · 20 citations · 8 models
vendor site · G219 answers · 24 citations · 8 models
vendor site · SecurityHive18 answers · 23 citations · 10 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
36 answers · 11 models
33 answers · 12 models
30 answers · 10 models
29 answers · 11 models
28 answers · 12 models
24 answers · 10 models
22 answers · 9 models
19 answers · 8 models
19 answers · 9 models
18 answers · 11 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best deception technology platform”, “deception technology platform”, “deception technology platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|
| Thinkst Canary thinkst.com | 30% | 103 | 590 | 8 | 189 | ||
| OpenCanary | 18% | 210 | 2 | ||||
| HoneyWire honeywire.dev | 10% | 24 | 20 | 0 | |||
| Trapster trapster.cloud | 6% | 24 | 880 | 43 | 216 | ||
| Canarytokens canarytokens.org | 4% | 12 | 720 | 8 | 778 | ||
| CyberTrap cybertrap.com | 4% | 12 | 20 | 0 | 1 | ||
| Morphisec | 2% | 390 | 4 | ||||
| Cynet cynet.com | 2% | 65 | 2,400 | 147 | 13,782 | 43 | |
| Defused defusedcyber.com | 2% | 4 | |||||
| Labyrinth Cyber Deception Platform labyrinth.tech | 2% | 2 |
Google's top ten for the three searches hold 21 sites; 5 of them are among the sites the models cited here (acalvio.com, g2.com, linkedin.com, slashdot.org, sourceforge.net). The first result for “best deception technology platform” is cybertrap.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best deception technology platform for a small B2B company?”Paraphrase“Which honeypot and decoy tool would you recommend to a small business that sells to other businesses?”Comparative“What are the top deception technology platforms for a small team and how do they differ?”Budget-constrained“What is the best deception technology platform for a small company with a tight budget?”Scale-constrained“We are a 30 person company evaluating a deception technology platform. What should we look at?”Negative“Which deception technology platforms should a small business avoid or be cautious about?”
Claude Haiku 4.5SentinelOne Singularity HologramOpenCanary, Thinkst CanaryChangedThinkst Canaryagainst: Acalvio ShadowPlexTrapsterno first choiceagainst: Illusive Networks, Rapid7 InsightIDR, Smokescreen Technologies, TopSpin Security
Three alternatives
Deceptive Bytes, FortiDeceptor, Thinkst CanaryTwo alternatives
Honeytokens, SecurityHiveFour alternatives
Cynet, Deceptive Bytes, Rapid7 InsightIDR, TracebitFive alternatives
Cowrie, Lupovis, OpenCanary, SentinelOne Singularity Hologram, T-PotGPT-5.4 miniLabyrinth Cyber Deception PlatformMicrosoft Defender XDRChangedThinkst Canaryagainst: Illusive-style deception platformsThinkst Canary / Canarytokensagainst: Rapid7 InsightIDRno first choicenothing named
Two alternatives
Cynet, MorphisecOne alternative
TrapEyeTwo alternatives
Acalvio ShadowPlex, Armis Centrix Early WarningGemini 3.5 FlashThinkst Canaryagainst: Acalvio ShadowPlexThinkst CanaryHeldThinkst Canaryagainst: Proofpoint, SentinelOne Singularity, Zscaler DeceptionThinkst Canaryagainst: Acalvio ShadowPlex, SentinelOne AttivoThinkst Canaryagainst: Acalvio ShadowPlex, FortiDeceptor, SentinelOne Singularity Hologramagainst: Acalvio ShadowPlex, Cowrie, Fortinet FortiDeceptor, Honeyd, Kippo, SentinelOne Singularity, T-Pot, Zscaler Deception
Four alternatives
CrowdStrike Falcon Deception, Cynet 360 AutoXDR, Labyrinth Cyber Deception Platform, SentinelOne SingularityFour alternatives
Canarytokens, OpenCanary, SecurityHive, StingBoxThree alternatives
Deceptive Bytes, Lupovis Snare, OpenCanaryFour alternatives
Canarytokens.org, OpenCanary, Tracebit, TripwiresOne alternative
TracebitPerplexity SonarThinkst Canaryagainst: Acalvio ShadowPlex, FortiDeceptorOpenCanaryChangedagainst: T-PotThinkst Canaryagainst: CounterCraft, Proofpoint ShadowThinkst Canaryagainst: Trapsterno first choicenothing named
One alternative
BaitsOne alternative
CowrieThree alternatives
Baits, Cymmetria MazeRunner, TracebitOne alternative
TracebitGrok 4.1 FastThinkst Canaryagainst: CyberTrap, FortiDeceptor, Morphisec, seedata.ioOpenCanaryChangedagainst: T-PotThinkst Canaryagainst: Acalvio ShadowPlex, Attivo, TrapXOpenCanaryagainst: Cynet, Smokescreen, Thinkst Canaryno first choiceagainst: Acalvio ShadowPlex, CounterCraft, Fortinet FortiDeceptor, Labyrinth, Rapid7 InsightIDR, SentinelOne with identity deception
Two alternatives
HoneyWire, TracebitOne alternative
Thinkst CanaryThree alternatives
Fortinet FortiDeceptor, HoneyWire, TracebitSix alternatives
Canarytokens, Cowrie, Dionaea, Morphisec, T-Pot, TrapsterMistral SmallHoneyWireOpenCanaryChangedThinkst CanaryCyberTrap, Smokescreen Technologiesno first choicenothing named
Two alternatives
Attivo Networks, CymulateOne alternative
T-PotTwo alternatives
Cymmetria MazeRunner, HoneyWireOne alternative
LupovisDeepSeek V4 FlashTrapsterOpenCanary, Thinkst CanaryChangedagainst: T-PotThinkst CanaryThinkst Canarytokensno first choiceagainst: Attivo Networks, Illusive Networks, TrapX Security, Zscaler Deception
Two alternatives
HoneyWire, MorphisecThree alternatives
Canarytokens.org, Cowrie, TrapsterFour alternatives
Morphisec, OpenCanary, Tracebit, TrapsterThree alternatives
OpenCanary, T-Pot, TrapsterLlama 4 MaverickHoneyWireMorphisecChangedCymmetria, Thinkst Canaryno first choiceno first choiceagainst: Fortinet FortiDeceiver
One alternative
TrapsterTwo alternatives
HoneyWire, WebDecoyOne alternative
HoneyWireQwen 3.7 FlashCanarytoolsTrapX SecurityChangedagainst: T-PotCanarytokensWazuhagainst: Attivo, Nozomi Networksno first choiceagainst: Cowrie, Dionaea, Honeypot-NG, Kippo
Three alternatives
Armbear, Project Canarytokens, TenableOne alternative
Attivo NetworksThree alternatives
HoneyWire, Thinkst Canary, TrapsterTwo alternatives
MITRE ATT&CK Caldera, T-PotKimi K2Thinkst CanaryThinkst CanaryHeldagainst: T-PotThinkst Canaryagainst: Acalvio ShadowPlex, SentinelOne Singularity HologramThinkst Canaryagainst: Acalvio ShadowPlex, Illusive Networksno first choicenothing named
Four alternatives
Acalvio ShadowPlex, Morphisec, Proofpoint Shadow, T-PotTwo alternatives
Cowrie, OpenCanaryOne alternative
CymmetriaFour alternatives
Canarytokens, Cowrie, Cymmetria MazeRunner, OpenCanaryGLM 4.7 FlashXCynet, HoneyWireThinkst CanaryChangedagainst: Sovereign honeypot, T-PotThinkst CanaryCyberTrap, Thinkst Canaryno first choiceagainst: Fortinet FortiDeceiver
Three alternatives
Lupovis, SentinelOne Singularity Identity, SmokescreenTwo alternatives
Kilpi Honeypot, WebDecoyTwo alternatives
T-Pot, TrapsterOne alternative
Self-Hosted Canary TokensMiniMax M2.5no first choiceagainst: HoneyWireKFSensorChangedMorphisec, TrapsterCanary Tokens, HoneyWireno first choiceagainst: Fortinet FortiDeceptor, Tracebit
Three alternatives
HoneyPoint Security Server, Honeyd, MHNFour alternatives
Acalvio ShadowPlex, Cynet, Illusive Networks, SmokescreenTwo alternatives
Hoxey, TrapsterGPT-6 LunaThinkst Canaryagainst: FortiDeceptorOpenCanaryChangedagainst: Thinkst CanaryThinkst Canaryagainst: Acalvio ShadowPlex, Fidelis DeceptionOpenCanaryno first choiceagainst: FortiDeceptor, OpenCanary, Thinkst Canary, Zscaler Deception
One alternative
OpenCanaryOne alternative
CanarytokensThree alternatives
Fortinet FortiDeceptor, OpenCanary, SentinelOne Singularity DeceptionTwo alternatives
Canarytokens, Thinkst CanaryMuse Glimmer 30BDefused, Trapsteragainst: HoneytrapCanarytokens, OpenCanaryChangedagainst: T-PotThinkst Canaryagainst: Attivo Networks, Illusive NetworksCanarytokens, HoneyWireno first choiceagainst: Attivo Networks, Attivo Networks ThreatDefend, Fortinet FortiDeceiver, Illusive Networks, TrapX DeceptionGrid, TrapX Security
One alternative
Cynet All-in-One Cybersecurity PlatformOne alternative
CowrieFive alternatives
CyberTrap, Defused, Morphisec, Smokescreen Technologies, TracebitTwo alternatives
Ballpoint, OpenCanaryBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency. Full answer text is in the free responses file. Download the record
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 22:55 | yes | 9 | 7 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-04 23:51 | yes | 1 | 3 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:53 | yes | 20 | 27 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-10-05 01:53 | yes | 17 | 3 s |
| Direct recommendation | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:36 | yes | 14 | 10 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:38 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 22:13 | yes | 15 | 28 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:30 | yes | 5 | 3 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 01:38 | no | 0 | 29 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:27 | yes | 21 | 26 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:52 | yes | 24 | 24 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:27 | yes | 9 | 38 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-10-04 22:26 | yes | 3 | 13 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:00 | yes | 17 | 25 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:34 | yes | 15 | 10 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:36 | yes | 2 | 7 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:21 | yes | 18 | 26 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-10-05 00:40 | yes | 20 | 2 s |
| Paraphrase | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 00:00 | yes | 23 | 9 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-10-05 01:38 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:08 | yes | 21 | 29 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:23 | yes | 5 | 2 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:03 | no | 0 | 29 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:59 | yes | 18 | 44 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:40 | yes | 21 | 67 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:57 | yes | 5 | 34 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:50 | yes | 3 | 9 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:36 | yes | 10 | 21 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-04 23:50 | yes | 9 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:31 | yes | 4 | 7 s |
| Comparative | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 00:19 | yes | 18 | 30 s |
| Comparative | Perplexity Sonar | sonar | 2026-10-05 00:02 | yes | 17 | 5 s |
| Comparative | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:17 | yes | 19 | 10 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:22 | yes | 19 | 10 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 01:22 | yes | 22 | 53 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-04 23:18 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 22:24 | yes | 20 | 37 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-04 23:34 | yes | 23 | 25 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 23:05 | yes | 24 | 93 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:20 | yes | 20 | 33 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-10-04 23:29 | yes | 5 | 21 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:33 | yes | 21 | 31 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:46 | yes | 19 | 7 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:02 | yes | 3 | 7 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:24 | yes | 18 | 23 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-10-05 00:54 | yes | 16 | 2 s |
| Budget constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-05 01:16 | yes | 21 | 8 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:04 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:26 | yes | 21 | 32 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 01:47 | yes | 5 | 3 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:23 | no | 0 | 29 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:56 | yes | 23 | 21 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 00:47 | yes | 24 | 46 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-04 22:26 | yes | 17 | 45 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:33 | yes | 3 | 12 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:41 | yes | 23 | 24 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 01:36 | no | 0 | 5 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 01:28 | no | 0 | 11 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-04 22:52 | yes | 7 | 25 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-10-05 00:55 | yes | 17 | 4 s |
| Scale constrained | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 22:34 | yes | 17 | 10 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 22:16 | no | 0 | 7 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-05 00:05 | yes | 16 | 107 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:19 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-04 23:26 | no | 0 | 26 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 00:42 | no | 0 | 25 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-04 22:16 | yes | 8 | 37 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 00:00 | yes | 5 | 23 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-10-05 00:32 | yes | 4 | 24 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 01:51 | yes | 13 | 17 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-10-05 00:26 | yes | 9 | 6 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-10-05 00:45 | yes | 5 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.5-flash | 2026-10-05 01:44 | yes | 15 | 27 s |
| Negative framing | Perplexity Sonar | sonar | 2026-10-04 23:53 | yes | 20 | 3 s |
| Negative framing | Grok 4.1 Fast | spacexai/grok-4.1-fast-non-reasoning via vertex | 2026-10-04 23:05 | yes | 17 | 11 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-10-04 23:15 | yes | 5 | 4 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-10-04 23:47 | yes | 19 | 45 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-10-05 00:55 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-10-05 00:47 | yes | 10 | 55 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-10-05 01:14 | yes | 24 | 21 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-10-05 01:49 | yes | 18 | 51 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-10-05 01:31 | yes | 16 | 50 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-10-05 01:14 | yes | 4 | 21 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-10-05 00:40 | yes | 14 | 22 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Acalvio read as Acalvio ShadowPlex
Fidelis read as Fidelis Deception
Fidelis Cybersecurity read as Fidelis Deception
Rapid7 read as Rapid7 InsightIDR
Rapid7 (now part of ThreatConnect) read as Rapid7 InsightIDR
Rapid7 (with InsightIDR Advanced/Ultimate tiers) read as Rapid7 InsightIDR
SentinelOne read as SentinelOne Singularity
SentinelOne (Attivo) read as SentinelOne Singularity
SentinelOne (Singularity Ranger/Hologram) read as SentinelOne Singularity
SentinelOne (formerly Attivo Networks) read as SentinelOne Singularity
Unresolved, counted raw
ActiveSOC
Armbear
Armis Centrix Early Warning
Ballpoint
Canary Tokens
Canarytools
CrowdStrike Falcon Deception
CrowdStrike FalconXDR (deception add-on)
Cynet All-in-One Cybersecurity Platform
Deception360
Havoc
HoneyPoint Security Server
Honeypot-NG
Honeytokens
Hoxey
Illusive-style deception platforms
KFSensor
Kilpi Honeypot
Lupovis Snare
MHN (Modern Honey Network)
MITRE ATT&CK Caldera
Project Canarytokens
Self-Hosted Canary Tokens
SentinelOne with identity deception
Sovereign honeypot
StingBox
Thinkst Canarytokens
TopSpin Security
Tripwires
Discontinued, still offered
No shut-down product was recommended here.