DentiGrid

What it does

Alert details

Alerts can include the origin IP, process tree, and target node, and can be sent to SOC webhooks.checked 30 Sep 2026

Alerts

Triggered lures send SOC webhooks with high-context telemetry such as origin IP, process tree, and target node.checked 30 Sep 2026

API

Dectrax documentation provides a REST API reference and an example API request for checking an IP threat status.checked 30 Sep 2026

Audience

Dectrax describes DentiGrid as designed for MSSPs and enterprise SOC teams, including multi-tenant management for MSSP operations.checked 30 Sep 2026

Decoy assets

Its synthetic lures include SSH keys, S3 buckets, Postgres tables, Kubernetes secrets, API keys, and fake Active Directory accounts.checked 30 Sep 2026

Decoy types

Its listed lures include SSH keys, S3 assets, Postgres tables, Kubernetes secrets, and API keys.checked 30 Sep 2026

Deployment

Dectrax says DentiGrid deploys agentlessly in under five minutes using RMM, Microsoft Intune, Jamf, or Ansible tooling.checked 30 Sep 2026

Deployment options

Pilot and Professional organizations connect to managed nodes, while Enterprise organizations can provision self-hosted decoys in AWS, Azure, and on-premises subnets via Docker.checked 30 Sep 2026

Endpoint footprint

Dectrax states that its lures consume 0% CPU or memory and require no agent footprint.checked 30 Sep 2026

Endpoint impact

The maker says DentiGrid lures consume 0% CPU or memory and have no agent footprint.checked 30 Sep 2026

Hosting

The documentation says Enterprise organizations can provision self-hosted decoys across private AWS, Azure, and on-premises subnets via Docker.checked 30 Sep 2026

Integrations

Listed SIEM integrations include Splunk, Microsoft Sentinel, Elastic, and IBM QRadar; the page also describes ArcSight event export.checked 30 Sep 2026

Intended customers

The maker identifies MSSPs and enterprise SOC teams as DentiGrid’s intended users.checked 30 Sep 2026

Multi-tenant use

The maker describes a multi-tenant management portal with isolated tenant telemetry views for MSSPs.checked 30 Sep 2026

Purpose

DentiGrid is a SIEM-native honeypot platform for MSSPs and enterprise SOC teams that uses decoy assets to detect adversary activity.checked 30 Sep 2026

Security

The documentation says sensor telemetry is encrypted and HMAC-signed before ingestion, and verified adversary IPs can be added to Palo Alto and Fortinet External Dynamic Lists.checked 30 Sep 2026

SIEM integrations

Dectrax lists Splunk, Microsoft Sentinel, Elastic Security, IBM QRadar, and ArcSight integrations.checked 30 Sep 2026

Splunk package

The Splunk add-on is described as including HEC streaming, a modular input feed, and three prebuilt SOC dashboards.checked 30 Sep 2026

Support

Dectrax says commercial licenses include the multi-tenant management portal, telemetry processing pipelines, SIEM connectors, and SLA-backed technical support.checked 30 Sep 2026

Threat handling

Dectrax documentation says telemetry is encrypted and HMAC-signed, and verified adversary IPs can be added to Palo Alto and Fortinet External Dynamic Lists.checked 30 Sep 2026