Sentinel Shield

Dedicated honeypots paired with your Sentinel agents.

Shield deploys decoy services on your network - external-facing to attract attackers, internal to catch lateral movement. Every probe correlates with Sentinel's host-level intelligence in real time.

Contact SalesSee Sentinel
From $750/subnet/mo (pilot pricing)
Deployment Modes

Two modes. One intelligence loop.

EXTERNAL

Web-Facing Honeypots

Internet-facing decoy services that mimic real infrastructure. Attract scanners, bots, and targeted attackers before they find your real assets.

  • 13 protocol facades (SSH, HTTP, HTTPS, FTP, Telnet, MySQL, Redis, SMB, DNS, MongoDB, PostgreSQL, SMTP, RDP)
  • Configurable personas (Confluence, WordPress, cPanel, etc.)
  • Credential capture across all protocols
  • MITRE ATT&CK mapped TTPs
  • Real-time IOC extraction
  • Pairs with Sentinel for cross-correlation
INTERNAL

Internal Honeypots

Decoy services placed inside your network perimeter. Any internal host that touches them is either compromised or misconfigured - either way, you need to know.

  • Detect lateral movement (T1021, T1570)
  • Catch insider threats and rogue devices
  • RFC1918-aware - flags internal IP probes
  • Silent deployment on unused ports
  • Zero impact on production services
  • Immediate Sentinel alert on any contact
How It Works

From contact to evidence in four steps.

1

Deploy Shield nodes

One honeypot per subnet, configured to mimic your environment.

2

Attract attacker contact

External nodes collect internet-facing threats. Internal nodes detect lateral movement.

3

Correlate with Sentinel

Probes are matched against Sentinel host telemetry for full attack context.

4

Respond with evidence

Signed proof packs tie honeypot contact to host-level actions.

Pricing

Shield pilot pricing.

Shield
$750/subnet/mo
Pilot pricing - market rate $1,250+
Contact Sales
  • Everything in Team
  • Dedicated honeypot node per subnet
  • Web-facing & internal modes
  • Real-time Sentinel pairing
  • Insider detection
  • 180-day retention

Start with Sentinel, add Shield when you're ready.

Every Shield deployment includes Sentinel Team capabilities for your hosts.

Deploy Sentinel FreeContact Sales for Shield