Ferstrike · BaitOps Console

Operate

Command Center

Start with deployment health, pending responses, and the next safe action.

Demo Client

quiet

Local lab Defensive deception Readiness 0% Last event no-events

collector online Decoy Mock LLM Honeypot

Active defense

Honeypot signal to authorized response

Review the active source, validate the trigger, run only bounded defensive actions, then hand evidence to the SOC stack.

Active defense command

Managed deception service

pilot

Next actions

Honeypot estate

Analyst workbench

queue

Engineering workbench

health

Workflow

Pilot path

Client coverage

Event types

Sources

Create sensor

Phase 1

Sensor inventory

Decoy

Open

Threat intelligence

Source IPs

Imported indicators

Import IoCs

Analyst response queue

Engineering test bench

Local only

Token wasting

Remote waste

Artifacts

Score honeypot request

SOC cases

Integration Center

Integration handoffs

Implementation

Install and prove a client sensor

Generate the package, run a heartbeat, verify checks, then continue into integrations and reporting.

Deployment tutorial

Deployment commands

Make it functional

Verification checklist

Client implementation plan

Controls

Scope gate	Client-owned CIDRs, hostnames and lab services only
Data handling	Synthetic credentials, canary markers, JSONL telemetry
Response boundary	Deception, containment, throttling, watchlist, ticketing
Integration targets	SIEM, SOAR, TIP, ticket queue, alert webhook

Client rollout readiness

Tenant setup	Client config, allowed scopes, sensors, and integration preferences are loaded from the active registry
Access control	Operator authentication, role-aware UI state, and audited response decisions are available for pilot use
Intel inputs	Manual IoC import, STIX bundles, MISP events, and SIEM-style payloads feed analyst triage
Deployment	Sensor package generation, Docker Compose, Helm artifacts, heartbeats, and health reporting support client rollout

Executive reports

Phase 4

Weekly executive report

Sensor health, canary activity, IoCs, response approvals, cases, gaps, MITRE ATT&CK and NIST CSF 2.0 in one client-ready HTML report.