- Home
- Honeypot Software
- CounterCraft The Platform
CounterCraft The Platform
San Sebastián, Spain
What it is
CounterCraft The Platform uses deception technology to divert attackers from critical infrastructure and capture threat intelligence. It creates digital twin environments that mirror an organization’s infrastructure and records actions against realistic decoys. Detection covers reconnaissance, credential abuse, lateral movement, insider misuse, ransomware activity, and post-compromise behavior. Real-time data is enriched with TTP, MITRE ATT&CK, and IOC context, while adversaries can be isolated in deception environments for 24–48 hours. The Platform supports IT and OT environments, and CounterCraft says ICS/OT networks need no modification. Deployment can be on-premises, cloud, or hybrid. Threat intelligence and alerts can feed existing security workflows, and the product automates deception-environment design, deployment, monitoring, and maintenance. CounterCraft says it follows ISO 27001. Pricing is by custom quote based on environment size, deployment scope, and use case.
For and against
For
- Mirrors infrastructure with digital twin environments
- Detects reconnaissance and post-compromise activity
- Supports IT and OT networks
- Offers cloud, on-premises, and hybrid deployment
- Integrates alerts with existing workflows
Against
- Pricing requires a custom quote
- Designed for enterprise organizations
- Deployment scope affects the quote
- Isolation is stated as 24–48 hours
The verdict
CounterCraft The Platform combines decoys, digital twins, threat-context enrichment, and workflow integrations for enterprise deception operations. Its custom pricing reflects environment size, deployment scope, and selected IT or OT use cases.
Who it suits
The Platform is designed for enterprise organizations, including government, financial services, healthcare, telecoms, manufacturing, and critical infrastructure. It suits teams operating IT, OT, or hybrid environments.
Plans and prices
The Platform
Custom quote based on environment size, deployment scope, and use cases such as IT, OT, or hybrid networks
Read 3 Oct 2026 · countercraftsec.com
On the record
- Adversary isolation
- CounterCraft says adversaries can be isolated in deception environments for 24–48 hours.countercraftsec.com · read 3 Oct 2026
- Automation
- The Platform datasheet says the product automates the design, deployment, monitoring, and maintenance of deception environments.countercraftsec.com · read 3 Oct 2026
- Company
- CounterCraft says its headquarters is in San Sebastian, Spain, and its co-founder says the business was founded in 2015.countercraftsec.com · read 3 Oct 2026
- Deployment environments
- The Platform can be configured for on-premises, cloud, and hybrid environments.countercraftsec.com · read 3 Oct 2026
- Digital twin environments
- The Platform creates digital twin environments that mirror an organization’s real infrastructure and records adversary actions against decoys.countercraftsec.com · read 3 Oct 2026
- Integrations
- Threat intelligence and alerts can be integrated into existing security workflows so teams can correlate signals with other telemetry.countercraftsec.com · read 3 Oct 2026
- Intended users
- The Platform is designed for enterprise organizations, including government, financial services, healthcare, telecoms, manufacturing, and critical infrastructure.countercraftsec.com · read 3 Oct 2026
- IT and OT
- The Platform supports IT and OT environments, and CounterCraft says ICS/OT networks do not need modification.countercraftsec.com · read 3 Oct 2026
- Pricing
- A custom quote is typically based on environment size, deployment scope, and IT, OT, or hybrid use cases.countercraftsec.com · read 3 Oct 2026
- Purpose
- The Platform uses deception technology and realistic decoy systems to draw attackers away from critical infrastructure and collect real-time threat intelligence.countercraftsec.com · read 3 Oct 2026
- Security
- CounterCraft says it follows the ISO 27001 standard and integrates ISO 27001 principles into its cybersecurity framework.countercraftsec.com · read 3 Oct 2026
- Support
- CounterCraft says it aims to respond to website inquiries within one business day.countercraftsec.com · read 3 Oct 2026
- Threat detection
- The Platform detects activity including reconnaissance, credential abuse, lateral movement, insider misuse, ransomware activity, and post-compromise behavior.countercraftsec.com · read 3 Oct 2026
- Threat intelligence
- It automatically enriches real-time threat data with TTP, MITRE ATT&CK, and IOC context.countercraftsec.com · read 3 Oct 2026
