Deception technology
Asked as “deception technology platform”, and as “honeypot and decoy tool”, on behalf of a mid-market B2B company. 48 first choices recorded across the direct, paraphrase, budget and scale prompts, fourteen models each. Added to the November 2026 Edition.
Standing · first-choice share
56%
Clear leader
56Thinkst Canary06Canarytokens04HoneyWire33others
56% of first choices, clear leader.
Since October 2026▲+20Since October 2026: 36% → 56%, +20 points. Past the 11-point floor: movement.Thinkst Canary held the lead, +20 points on 36%, past the floor.
By buyer segment
The same question asked on behalf of a different buyer. Each standing is computed within its segment; they sit side by side and are never added together.
Small business
Thinkst Canary53%Clear leader▲+23Since October 2026: 30% → 53%, +23 points. Past the 11-point floor: movement.Standing →Mid-marketThinkst Canary56%Clear leader▲+20Since October 2026: 36% → 56%, +20 points. Past the 11-point floor: movement.This pageEnterprise
Acalvio ShadowPlex61%Clear leader▲+14Since October 2026: 47% → 61%, +14 points. Past the 11-point floor: movement.Standing →
Thinkst Canary53%Clear leader▲+23Since October 2026: 30% → 53%, +23 points. Past the 11-point floor: movement.Standing →Mid-marketThinkst Canary56%Clear leader▲+20Since October 2026: 36% → 56%, +20 points. Past the 11-point floor: movement.This pageEnterpriseAcalvio ShadowPlex61%Clear leader▲+14Since October 2026: 47% → 61%, +14 points. Past the 11-point floor: movement.Standing →The standing
Share is the count of first choices across the direct, paraphrase, budget and scale prompts, over all fourteen models, for a mid-market B2B company. Ordered by share.
ProductFirst-choice shareNegative rateLabelsQuadrantSince October 2026
01Thinkst Canary56%0%48endorsed leader▲+20Since October 2026: 36% → 56%, +20 points. Past the 11-point floor: movement.36% → 56%
Thinkst Canary56%0%48endorsed leader▲+20Since October 2026: 36% → 56%, +20 points. Past the 11-point floor: movement.36% → 56%02
Canarytokens6%0%11accepted challenger=heldSince October 2026: 6% → 6%, ±0 points. Inside the 11-point floor: within noise.6% → 6%
Canarytokens6%0%11accepted challenger=heldSince October 2026: 6% → 6%, ±0 points. Inside the 11-point floor: within noise.6% → 6%03OpenCanary4%0%22accepted challenger=heldSince October 2026: 4% → 4%, ±0 points. Inside the 11-point floor: within noise.4% → 4%
04
HoneyWire4%0%12accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%
HoneyWire4%0%12accepted challenger▼−2Since October 2026: 6% → 4%, −2 points. Inside the 11-point floor: within noise.6% → 4%05Acalvio ShadowPlex2%24%42accepted challenger▼−7Since October 2026: 9% → 2%, −7 points. Inside the 11-point floor: within noise.9% → 2%
Acalvio ShadowPlex2%24%42accepted challenger▼−7Since October 2026: 9% → 2%, −7 points. Inside the 11-point floor: within noise.9% → 2%06
Tracebit2%8%13accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%
Tracebit2%8%13accepted challenger▼−4Since October 2026: 6% → 2%, −4 points. Inside the 11-point floor: within noise.6% → 2%07CounterCraft2%25%20criticized challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
08
Fidelis Deception2%8%12accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
Fidelis Deception2%8%12accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%09Cowrie2%20%10accepted challenger▲+2Since October 2026: 0% → 2%, +2 points. Inside the 11-point floor: within noise.0% → 2%
10T-Pot2%36%14criticized challenger=heldSince October 2026: 2% → 2%, ±0 points. Inside the 11-point floor: within noise.2% → 2%
Show the six products at 0%, ordered by negative rate
14Illusive Networks0%24%25accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
12
Zscaler Deception0%21%24accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
Zscaler Deception0%21%24accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%16Attivo Networks0%20%10accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
11Rapid7 InsightIDR Deception0%18%22accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
15
Fortinet FortiDeceptor0%10%10accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%
Fortinet FortiDeceptor0%10%10accepted challenger▼−2Since October 2026: 2% → 0%, −2 points. Inside the 11-point floor: within noise.2% → 0%13FortiDeceptor0%8%12accepted challenger=heldSince October 2026: 0% → 0%, ±0 points. Inside the 11-point floor: within noise.0% → 0%
The floor is 11 points of share, measured: how far the models move a leader on their own when the same questions are asked twice with nothing changed. A larger change is movement; a smaller one can't be told apart from repeat variation, and both are shown. Each index measures its own floor from its own repeat, over its own categories, so the floor differs from one index to the next. Both editions asked the same fourteen models. How the floor is measured
Bars are the share of first choices, 0 to 100Every product with at least 10 labels here. Every product name links to its product page.
All twenty-eight head-to-head pages: the top eight products, each against each
Thinkst Canary vs Acalvio ShadowPlexThinkst Canary vs TracebitThinkst Canary vs CounterCraftThinkst Canary vs Fidelis DeceptionCanarytokens vs OpenCanaryCanarytokens vs HoneyWireCanarytokens vs Acalvio ShadowPlexCanarytokens vs TracebitCanarytokens vs CounterCraftCanarytokens vs Fidelis DeceptionOpenCanary vs HoneyWireOpenCanary vs Acalvio ShadowPlexOpenCanary vs TracebitOpenCanary vs CounterCraftOpenCanary vs Fidelis DeceptionHoneyWire vs Acalvio ShadowPlexHoneyWire vs TracebitHoneyWire vs CounterCraftHoneyWire vs Fidelis DeceptionAcalvio ShadowPlex vs TracebitAcalvio ShadowPlex vs CounterCraftAcalvio ShadowPlex vs Fidelis DeceptionTracebit vs CounterCraftTracebit vs Fidelis DeceptionCounterCraft vs Fidelis Deception
One product takes 56% of first choices here, so the chart would put fifteen markers in one corner and one at the far edge. The two measurements it plots are columns in the standing above: share, and the negative label rate. Two products carry a negative rate above 25% in this category.
What they warned about
Eight of fourteen models held their first choice under the paraphrase. Claude Haiku 4.5, GPT-5.4 mini, DeepSeek V4 Flash, Qwen 3.7 Flash, Kimi K2 and MiniMax M2.5 changed. A high negative share on a product with few labels is a warning. A low share on a product with many labels is salience, not sentiment.
Acalvio ShadowPlex24%
10 of 42 labels negative · 7 of 14 models · 4 hard negative
“This platform had a 61% negative rate in a recommendation index for small businesses... avoid those that: ... Have a history of negative user reviews (like Acalvio ShadowPlex or T-Pot)” GLM 4.7 FlashX, negative prompt
T-Pot
36%
5 of 14 labels negative · 5 of 14 models · 3 hard negative
“Another platform that showed a 50% negative rate in the same study, suggesting significant user dissatisfaction.” GLM 4.7 FlashX, negative prompt
Illusive Networks
24%
6 of 25 labels negative · 5 of 14 models · 2 hard negative
“High negative sentiment: The IT AI Recommendation Index shows 42% negative rate with a "criticized challenger" rating” Kimi K2, negative prompt
Zscaler Deception21%
5 of 24 labels negative · 5 of 14 models · 2 hard negative
“33% negative rate with "criticized challenger" status - Zero first-choice share in recent evaluations” Kimi K2, negative prompt
What they cite
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted.
Sites the answers cite
71 of 84 answers in this category came back with a source list, from 14 of 14 models: citations where the model returns them, or the search results it consulted. 887 links across 215 sites, every framing counted. Ranked by the number of answers carrying the site or page. 79 of the 252 answers across every segment cited this index's own page for the category; the method page measures whether that reading tilts an answer.
40 answers · 40 citations · 11 models
vendor site · Acalvio32 answers · 77 citations · 12 models
26 answers · 26 citations · 9 models
vendor site · Guideflow24 answers · 25 citations · 11 models
vendor site · SourceForge23 answers · 30 citations · 10 models
publisher (Gane)21 answers · 27 citations · 9 models
vendor site · G219 answers · 26 citations · 10 models
vendor site · Zscaler18 answers · 24 citations · 9 models
vendor site · LinkedIn15 answers · 17 citations · 8 models
14 answers · 15 citations · 7 models
vendor site · GitHub13 answers · 32 citations · 7 models
vendor site · CyberPress13 answers · 13 citations · 5 models
Pages the answers cite
The ten pages named in the most answers, by full address. A page here is one the models returned with a recommendation, not one the index endorses.
40 answers · 11 models
26 answers · 9 models
18 answers · 9 models
16 answers · 8 models
14 answers · 7 models
13 answers · 9 models
12 answers · 5 models
12 answers · 8 models
12 answers · 8 models
10 answers · 8 models
Search against answers
Each company's standing in the answers beside its site's footprint in Google search, one row a site: the products the models named on it with their shares, and the share they add up to; monthly searches on Google, and DataForSEO's estimate of AI search demand (modeled from search signals, directional, not a count of queries to any assistant), for the most-searched of the company's and its products' names (the name is in each row's hover text); estimated monthly organic visits to the site; and its best position in Google's top ten for “best deception technology platform”, “deception technology platform”, “deception technology platforms”. US estimates from DataForSEO and Google's Ads Transparency Center. A small company's site, or a mid-sized company's site for its flagship, is marked company; a product on a large parent's site (Google, Microsoft) has no site figures. A column with no figures for this category is left out, and an empty cell means none were seen, not none exist. Two measurements side by side: neither is read as the cause of the other.
| Company and products | Share | Own site cited | Name searches, Google | AI search demand, est. | Organic visits | Paid search a month, est. | Google ads, last 30 days | Best Google position |
|---|---|---|---|---|---|---|---|---|
| Thinkst Canary thinkst.com | 56% | 131 | 590 | 8 | 189 | |||
| Canarytokens canarytokens.org | 6% | 27 | 720 | 8 | 778 | |||
| OpenCanary | 4% | 210 | 2 | |||||
| HoneyWire honeywire.dev | 4% | 28 | 20 | 0 | ||||
| Acalvio ShadowPlex acalvio.com | 2% | 131 | 20 | 1 | 2,358 | 3 | 3 | |
| Tracebit tracebit.com | 2% | 35 | 390 | 3 | 167 | $813 | 17 | |
| CounterCraft | 2% | 590 | 0 | |||||
| Fidelis Deception fidelissecurity.com | 2% | 33 | 10 | 0 | 24,973 | 6 | 4 | |
| Cowrie | 2% | 9,900 | 2,326 | |||||
| Cynet cynet.com | 2% | 46 | 2,400 | 147 | 13,782 | 43 |
Google's top ten for the three searches hold 21 sites; 5 of them are among the sites the models cited here (acalvio.com, g2.com, linkedin.com, sourceforge.net, zscaler.com). The first result for “best deception technology platform” is cybertrap.com.
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.ShowHide
How they answered
Six framings of the same buying question, each sent to every model in a fresh session with search on. One row per model, so a row shows whether it held its answer under rewording, what it named when cost was the constraint, and what it argued against. Computed from the raw judge labels.
ShowHideModelDirect“What is the best deception technology platform for a mid-market B2B company?”Paraphrase“Which honeypot and decoy tool would you recommend to a mid-sized B2B company?”Comparative“What are the top deception technology platforms and how do they differ?”Budget-constrained“What is the best deception technology platform for a company with a limited budget?”Scale-constrained“We are a 500 person company evaluating a deception technology platform. What should we look at?”Negative“Which deception technology platforms should I avoid or be cautious about?”
Claude Haiku 4.5Thinkst CanaryCanarytoken, CowrieChangedSentinelOne Singularity IdentityThinkst Canaryno first choicenothing named
Three alternatives
Acalvio ShadowPlex, Canarytokens, Illusive NetworksTwo alternatives
Honeyd, T-PotThree alternatives
Acalvio ShadowPlex, Fortinet FortiDeceptor, Zscaler DeceptionFive alternatives
Canarytokens, Cynet, Fortinet FortiDeceptor, OpenCanary, Rapid7 InsightIDR DeceptionGPT-5.4 miniLabyrinth Deception PlatformThinkst CanaryChangedFortiDeceptor, Zscaler Deceptionagainst: FirstWaveSmokescreenagainst: CounterCraft, Deception360, Labyrinthno first choiceagainst: DeCYFIR, Tracebit
Two alternatives
Cynet, TracebitTwo alternatives
Acalvio ShadowPlex, OpenCanaryOne alternative
Proofpoint ShadowOne alternative
Deceptive BytesGemini 3.5 FlashThinkst Canaryagainst: Acalvio ShadowPlex, CounterCraftThinkst CanaryHeldno first choiceCanarytokens, Thinkst Canaryagainst: SentinelOne Attivo, T-Pot, Zscaler Deceptionno first choiceagainst: Attivo Networks, Illusive Networks, Smokescreen Technologies, TrapX Security
Four alternatives
Fortinet FortiDeceptor, SentinelOne Singularity Remote Deception / Identity, Tracebit, Zscaler DeceptionFive alternatives
Canarytokens, FortiDeceptor, OpenCanary, SentinelOne Singularity Hologram, Zscaler DeceptionSix alternatives
Acalvio ShadowPlex, CounterCraft Cyber Deception Platform, Fortinet FortiDeceptor, Proofpoint Identity Threat Defense, SentinelOne Singularity Ranger Deception, Thinkst CanaryTwo alternatives
OpenCanary, TracebitPerplexity SonarThinkst CanaryThinkst CanaryHeldagainst: T-PotThinkst CanaryThinkst Canaryagainst: Acalvio ShadowPlex, CounterCraft, Zscaler Deceptionno first choiceagainst: CounterCraft, Cynet’s bundled deception, FortiDeceptor, Lupovis, SentinelOne’s Attivo capabilities, Zscaler’s Smokescreen offering
Three alternatives
Acalvio ShadowPlex, Fidelis Deception, Rapid7 InsightIDR DeceptionTwo alternatives
Cowrie, OpenCanaryFive alternatives
Acalvio ShadowPlex, CounterCraft, FortiDeceptor, Rapid7 InsightIDR Deception, Zscaler DeceptionTwo alternatives
Thinkst Canarytokens, Tracebit Community EditionGrok 4.20Thinkst Canaryagainst: HoneyPotThinkst CanaryHeldagainst: Conpot, Illusive Networks, TrapsterAcalvio ShadowPlexHoneyWireagainst: Acalvio ShadowPlex, CounterCraft, Illusive Networks, Rapid7 InsightIDR Deception, SentinelOne SingularityThinkst Canaryagainst: Attivo, Cowrie, Dionaea, Proofpoint Shadow, Rapid7 InsightIDR Deception, TrapX
Four alternatives
Acalvio ShadowPlex, FortiDeceptor, Illusive Networks, TrapXTwo alternatives
Canarytokens, T-PotFour alternatives
Attivo Networks ThreatDefend, Illusive Networks, Rapid7 InsightIDR Deception, TrapX SecurityThree alternatives
Cowrie, OpenCanary, Thinkst CanaryFour alternatives
CounterCraft, Fortinet FortiDeceptor, Rapid7 InsightIDR Deception, Zscaler DeceptionMistral SmallThinkst CanaryThinkst CanaryHeldAcalvio ShadowPlexThinkst Canaryno first choicenothing named
Two alternatives
CyberTrap, Zscaler DeceptionSeven alternatives
Allure Security, Attivo Networks, CyberTrap, Cynet, FortiDeceptor, Rapid7 InsightIDR Deception, TracebitTwo alternatives
HoneyWire, OpenCanaryDeepSeek V4 FlashAcalvio ShadowPlexagainst: Rapid7 Incident CommandThinkst CanaryChangedagainst: Acalvio ShadowPlex, Attivo, IllusiveAcalvio ShadowPlexThinkst Canaryagainst: T-Potno first choiceagainst: 8i, Acalvio ShadowPlex, Cynet, TrapX Security, Zscaler Deception
Two alternatives
SentinelOne Singularity, Thinkst CanaryOne alternative
T-PotFive alternatives
CounterCraft, Illusive Networks, Rapid7 InsightIDR Deception, SentinelOne Singularity, Smokescreen TechnologiesFour alternatives
Canarytokens, Cowrie, OpenCanary, Tracebit Community EditionLlama 4 MaverickThinkst CanaryThinkst CanaryHeldno first choiceHoneyWireno first choiceagainst: Acalvio ShadowPlex, Illusive Networks
Five alternatives
Acalvio ShadowPlex, Cymulate Deception, Fidelis Deception, Illusive Networks, TrapX DeceptionGridTwo alternatives
Acalvio ShadowPlex, HoneyWireTwo alternatives
CounterCraft, Thinkst CanaryQwen 3.7 FlashCymulateDeceptive SecurityChangedAcalvio ShadowPlex, Attivo NetworksWazuhagainst: Attivo, Ciscono first choicenothing named
Two alternatives
Attivo Networks, Crypt48Three alternatives
OpenCanary, ShinyHunters, T-PotTwo alternatives
Illusive Networks, Ridgeback Network DefenseThree alternatives
Canary Tokens, HestiaHoney, OpenCanaryKimi K2Cynet, TracebitThinkst CanaryChangedAcalvio ShadowPlexCanarytokensno first choiceagainst: Acalvio ShadowPlex, Fidelis Deceptionagainst: Acalvio ShadowPlex, Attivo Networks, Fortinet FortiDeceptor, Guardicore, Illusive Networks, T-Pot, TrapX Security, Zscaler Deception
Two alternatives
Acalvio ShadowPlex, Deceptive BytesThree alternatives
Canarytokens, OpenCanary, T-PotSix alternatives
CounterCraft, FortiDeceptor, Illusive Networks, Rapid7 InsightIDR Deception, SentinelOne Singularity Hologram, Thinkst CanaryTwo alternatives
OpenCanary, Thinkst CanarySix alternatives
CrowdStrike, Deceptive Bytes, Illusive Networks, SentinelOne Singularity, Thinkst Canary, Zscaler DeceptionGLM 4.7 FlashXThinkst CanaryThinkst CanaryHeldagainst: Acalvio ShadowPlexAcalvio ShadowPlexT-Potno first choiceagainst: Acalvio ShadowPlex, Rapid7 InsightIDR Deception, T-Pot
One alternative
Acalvio ShadowPlexOne alternative
HoneyWireFive alternatives
CounterCraft, Cymmetria, Illusive Networks, Rapid7 InsightIDR Deception, SentinelOne Singularity HologramTwo alternatives
Canarytokens, OpenCanaryMiniMax M2.5CounterCraft, Fidelis Deceptionagainst: Rapid7 InsightIDR DeceptionThinkst CanaryChangedagainst: CowrieAcalvio ShadowPlexCanarytokensno first choicenothing named
Two alternatives
Acalvio ShadowPlex, Attivo NetworksTwo alternatives
Illusive Networks, SentinelOne SingularityFive alternatives
CounterCraft Cyber Deception Platform, Fortinet FortiDeceptor, SentinelOne Singularity Hologram, Thinkst Canary, Zscaler DeceptionTwo alternatives
OpenCanary, Thinkst CanaryGPT-6 LunaThinkst CanaryThinkst CanaryHeldAcalvio ShadowPlex, Fortinet FortiDeceptorOpenCanaryno first choicenothing named
Three alternatives
Acalvio ShadowPlex, FortiDeceptor, Rapid7 InsightIDR DeceptionThree alternatives
Acalvio ShadowPlex, OpenCanary, Rapid7 InsightIDR DeceptionFive alternatives
Proofpoint Shadow, SentinelOne Singularity Identity, Thinkst Canary, Tracebit, Zscaler DeceptionOne alternative
Thinkst CanaryMuse Glimmer 30BThinkst Canaryagainst: TrapX DeceptionGridThinkst CanaryHeldAcalvio ShadowPlexCanarytokens OSS, OpenCanaryno first choiceagainst: Illusive Networks, Proofpoint Shadow, TrapX Security, Zscaler Deception
Two alternatives
Acalvio ShadowPlex, Attivo Networks ThreatDefend Deception and Response PlatformFour alternatives
Canarytokens, Cowrie, OpenCanary, T-PotThree alternatives
Attivo Networks, Inc., Illusive Networks, SentinelOne Inc.Three alternatives
HoneyWire, T-Pot, Thinkst CanaryBold is the first choiceAlternatives are counted; the count opens them.What the answer argued against
The record
One row per call: the version string exactly as returned, whether the model searched, sources cited, and latency.
Eighty-four rows: every prompt, every model, every answer.
| Prompt | Model | Version string | Time (UTC) | Searched | Sources | Latency |
|---|---|---|---|---|---|---|
| Direct recommendation | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:31 | yes | 17 | 9 s |
| Direct recommendation | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 15:17 | yes | 2 | 5 s |
| Direct recommendation | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 12:20 | yes | 11 | 19 s |
| Direct recommendation | Perplexity Sonar | sonar | 2026-11-01 14:20 | yes | 10 | 4 s |
| Direct recommendation | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:10 | yes | 14 | 17 s |
| Direct recommendation | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 09:21 | yes | 5 | 4 s |
| Direct recommendation | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 09:42 | yes | 20 | 27 s |
| Direct recommendation | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 11:42 | yes | 5 | 2 s |
| Direct recommendation | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 13:49 | no | 0 | 28 s |
| Direct recommendation | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 10:10 | yes | 22 | 46 s |
| Direct recommendation | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 19:20 | yes | 14 | 14 s |
| Direct recommendation | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 10:08 | yes | 13 | 61 s |
| Direct recommendation | GPT-6 Luna | gpt-6-luna | 2026-11-01 12:35 | yes | 4 | 16 s |
| Direct recommendation | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:30 | yes | 14 | 19 s |
| Paraphrase | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 16:41 | no | 0 | 5 s |
| Paraphrase | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:28 | yes | 4 | 5 s |
| Paraphrase | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 11:13 | no | 0 | 12 s |
| Paraphrase | Perplexity Sonar | sonar | 2026-11-01 16:37 | yes | 10 | 7 s |
| Paraphrase | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 14:17 | yes | 5 | 11 s |
| Paraphrase | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 19:14 | yes | 5 | 4 s |
| Paraphrase | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:15 | yes | 23 | 25 s |
| Paraphrase | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:25 | yes | 5 | 3 s |
| Paraphrase | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 11:43 | no | 0 | 29 s |
| Paraphrase | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 12:47 | yes | 19 | 21 s |
| Paraphrase | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:01 | yes | 25 | 32 s |
| Paraphrase | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 14:59 | no | 0 | 18 s |
| Paraphrase | GPT-6 Luna | gpt-6-luna | 2026-11-01 10:58 | yes | 4 | 14 s |
| Paraphrase | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 10:58 | yes | 14 | 23 s |
| Comparative | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:51 | yes | 9 | 9 s |
| Comparative | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:12 | yes | 6 | 9 s |
| Comparative | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 16:35 | yes | 9 | 27 s |
| Comparative | Perplexity Sonar | sonar | 2026-11-01 10:10 | yes | 10 | 6 s |
| Comparative | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:25 | yes | 10 | 16 s |
| Comparative | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:55 | yes | 9 | 10 s |
| Comparative | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 18:49 | yes | 19 | 78 s |
| Comparative | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 12:28 | yes | 5 | 2 s |
| Comparative | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 12:01 | yes | 24 | 69 s |
| Comparative | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 09:16 | yes | 19 | 55 s |
| Comparative | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 14:48 | yes | 23 | 29 s |
| Comparative | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:45 | yes | 17 | 41 s |
| Comparative | GPT-6 Luna | gpt-6-luna | 2026-11-01 08:46 | yes | 9 | 32 s |
| Comparative | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 11:49 | yes | 22 | 41 s |
| Budget constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 09:17 | yes | 19 | 10 s |
| Budget constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 09:26 | yes | 3 | 6 s |
| Budget constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 14:14 | yes | 6 | 19 s |
| Budget constrained | Perplexity Sonar | sonar | 2026-11-01 14:15 | yes | 10 | 4 s |
| Budget constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 13:40 | yes | 10 | 10 s |
| Budget constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:13 | yes | 5 | 3 s |
| Budget constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 19:22 | yes | 24 | 30 s |
| Budget constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 09:17 | yes | 5 | 2 s |
| Budget constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 17:56 | no | 0 | 30 s |
| Budget constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 11:47 | yes | 19 | 23 s |
| Budget constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:14 | yes | 22 | 40 s |
| Budget constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 19:44 | yes | 15 | 43 s |
| Budget constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 18:02 | yes | 2 | 14 s |
| Budget constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 19:10 | yes | 15 | 16 s |
| Scale constrained | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 18:53 | no | 0 | 5 s |
| Scale constrained | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 12:08 | no | 0 | 9 s |
| Scale constrained | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 15:57 | no | 0 | 16 s |
| Scale constrained | Perplexity Sonar | sonar | 2026-11-01 14:17 | yes | 10 | 6 s |
| Scale constrained | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 16:12 | yes | 13 | 20 s |
| Scale constrained | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 15:54 | no | 0 | 10 s |
| Scale constrained | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 13:00 | yes | 15 | 33 s |
| Scale constrained | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 15:43 | yes | 5 | 3 s |
| Scale constrained | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 15:42 | no | 0 | 30 s |
| Scale constrained | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 08:45 | yes | 20 | 52 s |
| Scale constrained | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 09:31 | yes | 17 | 18 s |
| Scale constrained | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 08:57 | no | 0 | 10 s |
| Scale constrained | GPT-6 Luna | gpt-6-luna | 2026-11-01 09:21 | yes | 4 | 20 s |
| Scale constrained | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 09:46 | yes | 13 | 21 s |
| Negative framing | Claude Haiku 4.5 | claude-haiku-4-5-20251001 | 2026-11-01 12:22 | yes | 19 | 9 s |
| Negative framing | GPT-5.4 mini | gpt-5.4-mini-2026-03-17 | 2026-11-01 11:23 | yes | 3 | 5 s |
| Negative framing | Gemini 3.5 Flash | gemini-3.6-flash (asked for gemini-3.5-flash; the API answered as this version) | 2026-11-01 08:52 | yes | 10 | 33 s |
| Negative framing | Perplexity Sonar | sonar | 2026-11-01 15:08 | yes | 10 | 5 s |
| Negative framing | Grok 4.20 | spacexai/grok-4.20-non-reasoning via xai | 2026-11-01 19:29 | yes | 15 | 15 s |
| Negative framing | Mistral Small | mistral/mistral-small via mistral | 2026-11-01 17:56 | yes | 5 | 5 s |
| Negative framing | DeepSeek V4 Flash | deepseek/deepseek-v4-flash via deepinfra | 2026-11-01 16:24 | yes | 23 | 34 s |
| Negative framing | Llama 4 Maverick | meta/llama-4-maverick via bedrock | 2026-11-01 18:48 | yes | 5 | 2 s |
| Negative framing | Qwen 3.7 Flash | alibaba/qwen3.7-flash via alibaba | 2026-11-01 09:02 | no | 0 | 33 s |
| Negative framing | Kimi K2 | moonshotai/kimi-k2 via novita | 2026-11-01 14:25 | yes | 25 | 36 s |
| Negative framing | GLM 4.7 FlashX | zai/glm-4.7-flashx via zai | 2026-11-01 10:01 | yes | 23 | 37 s |
| Negative framing | MiniMax M2.5 | minimax/minimax-m2.5 via minimax | 2026-11-01 13:44 | yes | 15 | 37 s |
| Negative framing | GPT-6 Luna | gpt-6-luna | 2026-11-01 16:48 | yes | 2 | 19 s |
| Negative framing | Muse Glimmer 30B | meta/muse-glimmer-30b via togetherai | 2026-11-01 13:46 | yes | 24 | 24 s |
Normalization in this category
Every judgment call made between the raw labels and the numbers above, listed so it is visible and reversible.
ShowHide
Category-scoped readings
Acalvio read as Acalvio ShadowPlex
Acalvio Technologies read as Acalvio ShadowPlex
Acalvio Technologies (ShadowPlex / 360 Deception) read as Acalvio ShadowPlex
Akamai (GuardiCore) read as Akamai Guardicore
Canarytokens.org read as Canarytokens
Fidelis read as Fidelis Deception
Fidelis Cybersecurity read as Fidelis Deception
Fidelis Cybersecurity (Deception) read as Fidelis Deception
Fidelis Cybersecurity (Fidelis Deception) read as Fidelis Deception
Fidelis Security (Fidelis Deception) read as Fidelis Deception
Fortinet read as Fortinet FortiDeceptor
Fortinet (FortiDeceptor) read as Fortinet FortiDeceptor
Proofpoint (Deception/Email Security integration) read as Proofpoint Shadow
Rapid7 read as Rapid7 InsightIDR Deception
Rapid7 (Incident Command/Deception features) read as Rapid7 InsightIDR Deception
Rapid7 (Insight Platform / Deception) read as Rapid7 InsightIDR Deception
Rapid7 InsightIDR read as Rapid7 InsightIDR Deception
SentinelOne read as SentinelOne Singularity
SentinelOne (Attivo) read as SentinelOne Singularity
SentinelOne (via Attivo Networks acquisition) read as SentinelOne Singularity
SentinelOne Singularity Deception (formerly Attivo Networks) read as SentinelOne Singularity Hologram
Zscaler read as Zscaler Deception
Zscaler (Smokescreen) read as Zscaler Deception
Unresolved, counted raw
8i
AWS HoneyPot
Attivo Networks ThreatDefend Deception and Response Platform
Beelzebub
Broadcom Symantec
Canaries.so
Canarytoken
Canarytokens OSS
Commvault Metallic ThreatWise
Commvault Systems Inc.
CounterCraft Security
Crypt48
Cymulate Deception
Cynet Deception
Cynet’s bundled deception
Darktrace Limited
DeCYFIR
Deception Toolkit (DTK)
Deceptive Security (Canarytools)
Fidelis Cybersecurity, Inc.
FirstWave
Fortinet FortiSandbox
HestiaHoney
HoneyPot
Javelin Networks
Managed Deception Services
Minerva
Minerva Anti-Evasion Platform
Ridgeback Network Defense
SentinelOne EDN
SentinelOne Inc.
SentinelOne Singularity Ranger Deception
SentinelOne Singularity Remote Deception / Identity
SentinelOne’s Attivo capabilities
ShinyHunters
Smokescreen Technologies Pvt. Ltd
VENUSTECH
Zscaler’s Smokescreen offering
Discontinued, still offered
No shut-down product was recommended here.