Tool preview

Customer Honeypot Preview

Customer Honeypot is an in-progress feature for surfacing suspicious activity from customer-controlled collectors, with analyst-first triage context and recommended next actions.

Status: In Development (Preview) | Target window: 3 months

Collector

skynet-collector-demo-01

Status: Online | Version: 0.8.2-preview

Events in Demo Set

12

Synthetic telemetry only (demo customer tenant).

High-Confidence Queue

7

Events currently marked as new for triage review.

Top Targeted Service

vpn-portal

Derived from synthetic preview event distribution.

What This Preview Demonstrates

  • Collector health/status card and event volume visibility.
  • Severity/status/service filtering for event triage workflows.
  • AI-assisted campaign pattern summary and operator recommendations.
  • Copy-ready event context for analyst handoff and notes.

Month 1

Preview quality and workflow fit

Refine triage UX, event labeling, and analyst action mapping for day-to-day usability.

Month 2

Detection and scoring depth

Expand enrichment heuristics, confidence calibration, and event grouping quality.

Month 3

Production foundation prep

Prepare integration interfaces, tenancy boundaries, and rollout readiness checklist.

Current Scope

  • Synthetic data only; no real customer telemetry collection is active in this preview.
  • No authentication, ingestion APIs, or production SOC guarantees are provided on this page.
  • AI-assisted output is informational and should be reviewed by a human operator.