
CounterCraft The Platform
CounterCraft The Platform uses deception technology to divert attackers from critical infrastructure and gather threat intelligence.
What CounterCraft The Platform is
CounterCraft The Platform uses deception technology to divert attackers from critical infrastructure and gather threat intelligence. It builds digital twin environments that mirror an organization’s infrastructure, then records adversary actions against decoys. Detection covers reconnaissance, credential abuse, lateral movement, insider misuse, ransomware activity, and post-compromise behavior. The platform enriches threat data with TTP, MITRE ATT&CK, and IOC context, and can isolate adversaries in deception environments for 24–48 hours. It supports IT and OT, with CounterCraft stating that ICS/OT networks need no modification. Deployment can be on-premises, in the cloud, or hybrid, and alerts and intelligence can feed existing security workflows. The product automates the design, deployment, monitoring, and maintenance of deception environments. It is designed for enterprise settings including government, finance, healthcare, telecoms, manufacturing, and critical infrastructure. CounterCraft follows the ISO 27001 standard. Pricing is by custom quote based on environment size, deployment scope, and use case.
Good
- Mirrors infrastructure with digital twin decoy environments.
- Detects activity from reconnaissance to ransomware behavior.
- Enriches threat data with MITRE ATT&CK and IOC context.
- Supports IT and OT without ICS/OT network modification.
- Deploys on-premises, in cloud, or in hybrid environments.
Watch out
- Pricing requires a custom quote.
- Designed for enterprise organizations.
Who it suits
The Platform is aimed at enterprise security teams, particularly in government, financial services, healthcare, telecoms, manufacturing, and critical infrastructure. It is relevant to organizations protecting IT, OT, or hybrid environments.
Verdict
CounterCraft The Platform is a deception and threat-intelligence system for enterprise environments. Its custom pricing depends on deployment scope and the organization’s infrastructure.
Plans and prices
From CounterCraft The Platform's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| The Platform | Priced on request | Custom quote based on environment size, deployment scope, and use cases such as IT, OT, or hybrid networks |
The facts
Each one read from CounterCraft The Platform's own pages, with the date it was checked.
What it does
- Adversary isolation
- CounterCraft says adversaries can be isolated in deception environments for 24–48 hours.checked 3 Oct 2026
- Automation
- The Platform datasheet says the product automates the design, deployment, monitoring, and maintenance of deception environments.checked 3 Oct 2026
- Deployment environments
- The Platform can be configured for on-premises, cloud, and hybrid environments.checked 3 Oct 2026
- Digital twin environments
- The Platform creates digital twin environments that mirror an organization’s real infrastructure and records adversary actions against decoys.checked 3 Oct 2026
- Integrations
- Threat intelligence and alerts can be integrated into existing security workflows so teams can correlate signals with other telemetry.checked 3 Oct 2026
- Intended users
- The Platform is designed for enterprise organizations, including government, financial services, healthcare, telecoms, manufacturing, and critical infrastructure.checked 3 Oct 2026
- IT and OT
- The Platform supports IT and OT environments, and CounterCraft says ICS/OT networks do not need modification.checked 3 Oct 2026
- Pricing
- A custom quote is typically based on environment size, deployment scope, and IT, OT, or hybrid use cases.checked 3 Oct 2026
- Purpose
- The Platform uses deception technology and realistic decoy systems to draw attackers away from critical infrastructure and collect real-time threat intelligence.checked 3 Oct 2026
- Security
- CounterCraft says it follows the ISO 27001 standard and integrates ISO 27001 principles into its cybersecurity framework.checked 3 Oct 2026
- Support
- CounterCraft says it aims to respond to website inquiries within one business day.checked 3 Oct 2026
- Threat detection
- The Platform detects activity including reconnaissance, credential abuse, lateral movement, insider misuse, ransomware activity, and post-compromise behavior.checked 3 Oct 2026
- Threat intelligence
- It automatically enriches real-time threat data with TTP, MITRE ATT&CK, and IOC context.checked 3 Oct 2026
The company
- Company
- CounterCraft says its headquarters is in San Sebastian, Spain, and its co-founder says the business was founded in 2015.checked 3 Oct 2026
- Founded
- 2015checked 28 Sep 2026
- Headquarters
- San Sebastián, Spainchecked 28 Sep 2026
Alternatives to CounterCraft The Platform
- 1

Canarytokens
Free planAndroidiOSWebSelf-hosted6.6Free plan - 2
OpenCanary
Free planLinuxmacOSSelf-hosted6.5Free plan - 3
Honeytrap
Free planLinuxSelf-hosted6.2Free plan - 4
KFSensor
Windows6.2From $120 a year - 5

Thinkst Canary
WebAPILinuxmacOS6.2From $7,500 a year - 6
Honeyd
Free planLinuxSelf-hostedWindows6.0Free plan
