Cybersense Deception is an attack detection system from Cybersense GmbH. It places lures (fake credentials, tokens, certificates or misconfigurations) and realistic virtual decoy servers among the real systems, across the network, at application level and in Active Directory. Any interaction with such a trap raises an alert, so attackers are spotted during reconnaissance, lateral movement and privilege escalation. According to the vendor, it works without installing additional software on production systems and can run on-premises, hybrid or in the cloud. Alerts can go to a SIEM, a SOC, e-mail, SMS or a ticketing system; optionally the Cybersense SOC in Dortmund handles first-level triage.
Cybersense GmbH is headquartered in Dortmund, Germany, and its website names no foreign parent company. Because lures and decoys are placed in the customer's own environment, the detection layer stays under the organisation's control, with the optional managed service as an add-on. The vendor describes the solution as GDPR-compliant and developed in Germany. The product page does not state exactly where data of the managed service is processed, so this is worth confirming with the vendor.