# Deception technology for enterprise buyers: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "deception technology platform" and as "honeypot and decoy tool", six framings each, to fourteen models with search on, on behalf of an enterprise B2B company. Added to the November 2026 Edition. Page: https://www.gane.ai/index/it/security/deception-technology/2026-11/enterprise

**Standing:** Acalvio ShadowPlex leads with 61% of first choices; verdict clear leader. 46 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [Acalvio ShadowPlex](https://www.gane.ai/index/it/vendors/acalvio-shadowplex/index.md) | 61% | 4% | 57 |
| 2 | [Thinkst Canary](https://www.gane.ai/index/it/vendors/thinkst-canary/index.md) | 22% | 13% | 39 |
| 3 | [Zscaler Deception](https://www.gane.ai/index/it/vendors/zscaler-deception/index.md) | 4% | 10% | 41 |
| 4 | [CounterCraft](https://www.gane.ai/index/it/vendors/countercraft/index.md) | 2% | 18% | 28 |
| 5 | [Attivo Networks](https://www.gane.ai/index/it/vendors/attivo-networks/index.md) | 2% | 30% | 10 |
| 6 | [Illusive](https://www.gane.ai/index/it/vendors/illusive/index.md) | 2% | 20% | 10 |
| 10 | [FortiDeceptor](https://www.gane.ai/index/it/vendors/fortideceptor/index.md) | 0% | 16% | 19 |
| 11 | [Fortinet FortiDeceptor](https://www.gane.ai/index/it/vendors/fortinet-fortideceptor/index.md) | 0% | 17% | 18 |
| 12 | [Rapid7 InsightIDR Deception](https://www.gane.ai/index/it/vendors/rapid7-insightidr-deception/index.md) | 0% | 20% | 20 |
| 13 | [Rapid7 Incident Command](https://www.gane.ai/index/it/vendors/rapid7-incident-command/index.md) | 0% | 15% | 13 |
| 15 | [Fidelis Deception](https://www.gane.ai/index/it/vendors/fidelis-deception/index.md) | 0% | 25% | 12 |
| 25 | [Proofpoint Shadow](https://www.gane.ai/index/it/vendors/proofpoint-shadow/index.md) | 0% | 31% | 13 |

Rank is by share of first choices among all 87 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Acalvio ShadowPlex; alternatives FortiDeceptor, Illusive, Smokescreen
- GPT-5.4 mini: Acalvio ShadowPlex; alternatives Labyrinth, Rapid7 InsightIDR Deception, Thinkst Canary
- Gemini 3.5 Flash: Acalvio ShadowPlex; alternatives CounterCraft, SentinelOne Singularity Identity, Thinkst Canary, Tracebit
- Perplexity Sonar: Acalvio ShadowPlex; alternatives CounterCraft, Fidelis Deception, FortiDeceptor, Rapid7 InsightIDR Deception
- Grok 4.20: Acalvio ShadowPlex; alternatives Fidelis Deception, Illusive Networks, Rapid7 InsightIDR Deception, SentinelOne Singularity
- Mistral Small: Acalvio ShadowPlex; alternatives Rapid7 Incident Command, Thinkst Canary, Zscaler Deception
- DeepSeek V4 Flash: Acalvio ShadowPlex; alternatives CounterCraft, Fortinet FortiDeceptor, Thinkst Canary, Zscaler Deception
- Llama 4 Maverick: Acalvio ShadowPlex; alternatives Attivo Networks ThreatDefend, Rapid7 InsightIDR Deception, Thinkst Canary
- Qwen 3.7 Flash: Attivo Networks; alternatives Illusive Networks, Threatisle
- Kimi K2: Acalvio ShadowPlex; alternatives Fortinet FortiDeceptor, Rapid7 InsightIDR Deception, SentinelOne Singularity Hologram, Zscaler Deception
- GLM 4.7 FlashX: Acalvio ShadowPlex; alternatives CounterCraft, FortiDeceptor, Rapid7 Incident Command, Zscaler Deception
- MiniMax M2.5: Acalvio ShadowPlex; alternatives Rapid7 InsightIDR Deception, Zscaler Deception
- GPT-6 Luna: Acalvio ShadowPlex; alternatives FortiDeceptor, Thinkst Canary, Zscaler Deception
- Muse Glimmer 30B: Rapid7, Inc., Smokescreen Technologies, Zscaler Deception; alternatives Attivo Networks, Inc., CounterCraft, FortiDeceptor, Illusive Networks

## Sources the answers cite

76 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- acalvio.com: 44 answers, 100 citations
- verifiedmarketresearch.com: 42 answers, 42 citations
- zscaler.com: 34 answers, 52 citations
- expertinsights.com: 32 answers, 32 citations
- gane.ai/index: 30 answers, 33 citations
- guideflow.com: 26 answers, 27 citations
- countercraftsec.com: 22 answers, 23 citations
- fidelissecurity.com: 18 answers, 22 citations

Pages named in the most answers:

- https://verifiedmarketresearch.com/blog/best-deception-technology-software (42 answers)
- https://expertinsights.com/network-security/best-deception-technology-companies (32 answers)
- https://gane.ai/index/it/security/deception-technology/enterprise (30 answers)
- https://guideflow.com/blog/deception-technology-software (25 answers)
- https://zscaler.com/products-and-solutions/deception-technology (23 answers)
- https://acalvio.com/resources/guide/acalvio-cyber-deception-buyers-guide (15 answers)
- https://acalvio.com/preemptive-security/competitive-intelligence-cyber-deception (15 answers)
- https://aimultiple.com/deception-tech-companies (15 answers)
- https://zscaler.com/blogs/product-insights/what-to-look-for-deception-technology (15 answers)
- https://techtarget.com/news/7-top-deception-technology-vendors-for-active-defense/836383 (14 answers)

## Warned against

- Illusive Networks: 7 of 17 labels negative. ""Pure network-wide standalone deception from Illusive is essentially sunsetted" — the product has been absorbed into Proofpoint's identity threat protection line" (Kimi K2, negative prompt)
- Cowrie: 5 of 7 labels negative. "generic open-source/low-interaction honey pots like Cowrie/Honeyd: These often lack automation" (Grok 4.20, negative prompt)
- Proofpoint Shadow: 4 of 13 labels negative. "Avoid classic per-identity/per-user deception such as Proofpoint Deceptions Everywhere / Illusive Networks where total cost grows linearly with headcount." (Muse Glimmer 30B, budget prompt)
- CounterCraft: 5 of 28 labels negative. "High entry cost ($200,000/year minimum) and quote-based pricing" (MiniMax M2.5, budget prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: Acalvio ShadowPlex at 61%.

- Acalvio ShadowPlex: 47% to 61%, +14. Cleared the floor by 3 points · rank 1 of 87, unchanged.
- Thinkst Canary: 10% to 22%, +12. Cleared the floor by 1 point · rank 2 of 87, unchanged.
- Rapid7 Incident Command: 6% to 0%, −6. Inside the floor by 5 points · rank 5 → 13 of 87.
- SentinelOne Singularity: 4% to 0%, −4. Inside the floor by 7 points · rank 6 → 16 of 87.
- Zscaler Deception: 6% to 4%, −2. Inside the floor by 9 points · rank 3 of 87, unchanged.
- Attivo Networks: 0% to 2%, +2. Inside the floor by 9 points · rank 20 → 5 of 87.
- Rapid7 InsightIDR Deception: 2% to 0%, −2. Inside the floor by 9 points · rank 11 → 12 of 87.
- Fidelis Deception: 2% to 0%, −2. Inside the floor by 9 points · rank 9 → 15 of 87.
- Illusive Networks: 2% to 0%, −2. Inside the floor by 9 points · rank 10 → 52 of 87.
- CounterCraft: 2% to 2%, ±0. Inside the floor by 11 points · rank 7 → 4 of 87.
- Illusive: 2% to 2%, ±0. Inside the floor by 11 points · rank 13 → 6 of 87.
- FortiDeceptor: 0% to 0%, ±0. Inside the floor by 11 points · rank 17 → 10 of 87.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.