# Deception technology: what AI models recommend, November 2026

Gane Index, November 2026 Edition. Asked as "deception technology platform" and as "honeypot and decoy tool", six framings each, to fourteen models with search on, on behalf of a mid-market B2B company. Added to the November 2026 Edition. Page: https://www.gane.ai/index/it/security/deception-technology/2026-11

**Standing:** Thinkst Canary leads with 56% of first choices; verdict clear leader. 48 first choices across the direct, paraphrase, budget and scale prompts.

## First-choice share

| Rank | Product | Share | Negative rate | Labels |
|---|---|---|---|---|
| 1 | [Thinkst Canary](https://www.gane.ai/index/it/vendors/thinkst-canary/index.md) | 56% | 0% | 48 |
| 2 | [Canarytokens](https://www.gane.ai/index/it/vendors/canarytokens/index.md) | 6% | 0% | 11 |
| 3 | [OpenCanary](https://www.gane.ai/index/it/vendors/opencanary/index.md) | 4% | 0% | 22 |
| 4 | [HoneyWire](https://www.gane.ai/index/it/vendors/honeywire/index.md) | 4% | 0% | 12 |
| 5 | [Acalvio ShadowPlex](https://www.gane.ai/index/it/vendors/acalvio-shadowplex/index.md) | 2% | 24% | 42 |
| 6 | [Tracebit](https://www.gane.ai/index/it/vendors/tracebit/index.md) | 2% | 8% | 13 |
| 7 | [CounterCraft](https://www.gane.ai/index/it/vendors/countercraft/index.md) | 2% | 25% | 20 |
| 8 | [Fidelis Deception](https://www.gane.ai/index/it/vendors/fidelis-deception/index.md) | 2% | 8% | 12 |
| 9 | [Cowrie](https://www.gane.ai/index/it/vendors/cowrie/index.md) | 2% | 20% | 10 |
| 12 | [T-Pot](https://www.gane.ai/index/it/vendors/t-pot/index.md) | 2% | 36% | 14 |
| 19 | [Rapid7 InsightIDR Deception](https://www.gane.ai/index/it/vendors/rapid7-insightidr-deception/index.md) | 0% | 18% | 22 |
| 20 | [Zscaler Deception](https://www.gane.ai/index/it/vendors/zscaler-deception/index.md) | 0% | 21% | 24 |

Rank is by share of first choices among all 113 products named; products with the same share are tied, and the order among them carries no meaning. The table lists those with at least 10 labels.

## Each model's first choice on the direct prompt

- Claude Haiku 4.5: Thinkst Canary; alternatives Acalvio ShadowPlex, Canarytokens, Illusive Networks
- GPT-5.4 mini: Labyrinth Deception Platform; alternatives Cynet, Tracebit
- Gemini 3.5 Flash: Thinkst Canary; alternatives Fortinet FortiDeceptor, SentinelOne Singularity Remote Deception / Identity, Tracebit, Zscaler Deception
- Perplexity Sonar: Thinkst Canary; alternatives Acalvio ShadowPlex, Fidelis Deception, Rapid7 InsightIDR Deception
- Grok 4.20: Thinkst Canary; alternatives Acalvio ShadowPlex, FortiDeceptor, Illusive Networks, TrapX
- Mistral Small: Thinkst Canary; alternatives CyberTrap, Zscaler Deception
- DeepSeek V4 Flash: Acalvio ShadowPlex; alternatives SentinelOne Singularity, Thinkst Canary
- Llama 4 Maverick: Thinkst Canary; alternatives Acalvio ShadowPlex, Cymulate Deception, Fidelis Deception, Illusive Networks
- Qwen 3.7 Flash: Cymulate; alternatives Attivo Networks, Crypt48
- Kimi K2: Cynet, Tracebit; alternatives Acalvio ShadowPlex, Deceptive Bytes
- GLM 4.7 FlashX: Thinkst Canary; alternatives Acalvio ShadowPlex
- MiniMax M2.5: CounterCraft, Fidelis Deception; alternatives Acalvio ShadowPlex, Attivo Networks
- GPT-6 Luna: Thinkst Canary; alternatives Acalvio ShadowPlex, FortiDeceptor, Rapid7 InsightIDR Deception
- Muse Glimmer 30B: Thinkst Canary; alternatives Acalvio ShadowPlex, Attivo Networks ThreatDefend Deception and Response Platform

## Sources the answers cite

71 of 84 answers came back with a source list, from 14 of 14 models. Sites named in the most answers:

- verifiedmarketresearch.com: 40 answers, 40 citations
- acalvio.com: 32 answers, 77 citations
- expertinsights.com: 26 answers, 26 citations
- guideflow.com: 24 answers, 25 citations
- sourceforge.net: 23 answers, 30 citations
- gane.ai/index: 21 answers, 27 citations
- g2.com: 19 answers, 26 citations
- zscaler.com: 18 answers, 24 citations

Pages named in the most answers:

- https://verifiedmarketresearch.com/blog/best-deception-technology-software (40 answers)
- https://expertinsights.com/network-security/best-deception-technology-companies (26 answers)
- https://guideflow.com/blog/deception-technology-software (18 answers)
- https://zscaler.com/blogs/product-insights/what-to-look-for-deception-technology (16 answers)
- https://canary.tools/ (14 answers)
- https://g2.com/categories/deception-technology (13 answers)
- https://cyberpress.org/deception-technology-review (12 answers)
- https://gane.ai/index/it/security/deception-technology (12 answers)
- https://sourceforge.net/software/deception-technology (12 answers)
- https://acalvio.com/ (10 answers)

## Warned against

- Acalvio ShadowPlex: 10 of 42 labels negative. "This platform had a 61% negative rate in a recommendation index for small businesses... avoid those that: ... Have a history of negative user reviews (like Acalvio ShadowPlex or T-Pot)" (GLM 4.7 FlashX, negative prompt)
- T-Pot: 5 of 14 labels negative. "Another platform that showed a 50% negative rate in the same study, suggesting significant user dissatisfaction." (GLM 4.7 FlashX, negative prompt)
- Illusive Networks: 6 of 25 labels negative. "High negative sentiment: The IT AI Recommendation Index shows 42% negative rate with a "criticized challenger" rating" (Kimi K2, negative prompt)
- Zscaler Deception: 5 of 24 labels negative. "33% negative rate with "criticized challenger" status - Zero first-choice share in recent evaluations" (Kimi K2, negative prompt)

## Movement since October 2026

Floor: 11 points of share, measured on the calibration repeat.
Same leader: Thinkst Canary at 56%.

- Thinkst Canary: 36% to 56%, +20. Cleared the floor by 9 points · rank 1 of 113, unchanged.
- Acalvio ShadowPlex: 9% to 2%, −7. Inside the floor by 4 points · rank 2 → 5 of 113.
- Tracebit: 6% to 2%, −4. Inside the floor by 7 points · rank 3 → 6 of 113.
- HoneyWire: 6% to 4%, −2. Inside the floor by 9 points · rank 5 → 4 of 113.
- CounterCraft: 0% to 2%, +2. Inside the floor by 9 points · rank 23 → 7 of 113.
- Fidelis Deception: 0% to 2%, +2. Inside the floor by 9 points · rank 26 → 8 of 113.
- Cowrie: 0% to 2%, +2. Inside the floor by 9 points · rank 25 → 9 of 113.
- Rapid7 InsightIDR Deception: 2% to 0%, −2. Inside the floor by 9 points · rank 10 → 19 of 113.
- Illusive Networks: 2% to 0%, −2. Inside the floor by 9 points · rank 15 → 22 of 113.
- Fortinet FortiDeceptor: 2% to 0%, −2. Inside the floor by 9 points · rank 8 → 23 of 113.
- Canarytokens: 6% to 6%, ±0. Inside the floor by 11 points · rank 4 → 2 of 113.
- OpenCanary: 4% to 4%, ±0. Inside the floor by 11 points · rank 6 → 3 of 113.

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.