DECTRAX
DentiGrid is a deception-based cybersecurity platform that deploys lightweight decoy sensors across internal subnets, DMZs, and industrial networks to eliminate alert fatigue. Because legitimate traffic never touches decoy assets, every alert is a high-confidence signal with a deterministic 0.00% false alarm rate. The platform deploys in under 60 seconds as an unprivileged Docker container and dispatches cryptographically signed telemetry directly to major SIEM platforms.
- Cybersecurity
- Software Only
- Artificial Intelligence
Funding
Founders
Founder details are not available yet.
Product
Problem
Legacy EDR and SIEM systems generate thousands of false alarms that drown out genuine threat signals, leading to alert fatigue and delayed response times. These heuristic-based detection methods require constant tuning of complex rules after attacks occur and impose heavy CPU and memory overhead on client workstations, leaving organizations vulnerable to sophisticated intrusions.
Solution
DentiGrid provides a deception-based cybersecurity platform that deploys lightweight decoy sensors across internal subnets, DMZs, and industrial networks. Because legitimate traffic never touches decoy assets, every alert is a high-confidence signal with a deterministic 0.00% false alarm rate. The platform autonomously profiles assets, deploys realistic decoys, and actively contains intrusions by trapping hostile ingress inside synthetic decoys and quarantining them across firewalls in under 0.3ms while production systems remain untouched. It deploys in under 60 seconds as a standard unprivileged Docker container or Compose service, requiring no kernel drivers or system-invasive modifications, and dispatches cryptographically signed telemetry directly to major SIEM platforms.
Target Audience
Primary customers are security operations center (SOC) teams and managed security service providers (MSSPs) seeking to replace noisy heuristic detection rules with deterministic, low-maintenance threat detection across enterprise infrastructure, including internal subnets, DMZs, and industrial control system networks.
Features
- Agentless deployment as unprivileged Docker container or Compose service in under 60 seconds, with no kernel drivers or system modifications required
- Deterministic honeypot lures that eliminate false positives entirely, achieving 0.00% false alarm rate versus noisy heuristic rules
- Multi-protocol decoy services simulating Linux SSH (port 2222), HTTP Admin Portals (8080), Redis DBs (6379), and Modbus/DNP3 industrial ICS endpoints
- Isolated decoy traps running in user namespaces (UID 10001) capped under 512MB RAM, safely capturing adversary commands and payload samples
- HMAC-SHA256 signed telemetry ingestion via DentiGrid Gateway with automatic firewall EDL feed updates
- Native SIEM connectors for Splunk HEC (with turnkey Splunkbase add-on), Microsoft Sentinel (Azure ARM templates), QRadar LEEF 2.0, Elastic SIEM, Datadog, and Cloudflare, plus Slack/Teams webhooks
- Active intrusion containment that quarantines hostile traffic across firewalls in under 0.3ms while production systems remain untouched
- Live autonomous interdiction flow showing asset profiling, decoy deployment, and intrusion containment in action