Scope
We include public resources relevant to defensive decoys, deception and adversary observation. Related areas such as moving target defense are labeled separately. We show review dates and the material examined; source language is recorded when verified.
How a resource is added
- We identify the original source and check its URL, authorship and date.
- We classify technique, environment and resource kind.
- We write an original summary bounded by the source.
- We record whether we read a product page, repository documentation, publisher metadata, abstract or full text.
- An editor reviews changes before publication.
What we reviewed
We distinguish public pages, repository metadata, publisher metadata, abstracts and full text. These categories describe what was examined, not product quality. Every claim must stay within its source. Critical-reading notes explain limits and open questions; they are not independent tests.
Coverage and missing data
The map shows the editorial distribution by resource type, technique, environment and review depth. Source language is recorded when verified. Organization country, deployment regions and sectors were withdrawn from current reporting because coverage was insufficient, without deleting data in published releases. An empty cell means no catalogued evidence, not an absence of offerings or research.
See the map and missing data →
Comparison
We do not rank products by effectiveness from commercial pages. A comparison records the same scenario, baseline, investigable signals, missed alerts, false positives and operating load. We publish the protocol and a reusable template.
Corrections and interests
We accept suggestions and corrections with a primary URL. Vendor submissions are attributed and receive no preferential treatment. The editor checks source, scope and potential conflicts before publication. Federico Pacheco, the Atlas owner, contributed to BUDA, DOLOS-T and Cyber Deception Playground; those six records carry a visible disclosure and are not presented as independent evaluations. A correction changes a record through editorial review; automated discovery only creates a reminder.
Limits
Coverage grows in stages. A metadata-only record is not a full paper analysis. Vendor-published experiences retain that attribution. Fields without public evidence remain empty. The catalog is not a worldwide census.
Glossary
Decoy system or service recording unauthorized interactions.
Decoy data that triggers an alert when accessed or used.
Asset resembling a real resource to divert or observe activity.
Planned defensive activities to observe and influence an adversary.
Deliberate change to environment characteristics that makes reconnaissance harder; labeled as a related area when applicable.