- Home
- Honeypot Software
- DentiGrid
DentiGrid
What it is
DentiGrid is a paid, hybrid SIEM-native honeypot platform for MSSPs and enterprise SOC teams. It deploys synthetic lures such as SSH keys, S3 buckets, Postgres tables, Kubernetes secrets, API keys, and fake Active Directory accounts to detect unauthorized activity. Dectrax says deployment is agentless and takes under five minutes through RMM, Microsoft Intune, Jamf, or Ansible. Lures are stated to use 0% CPU or memory. Triggered alerts can include origin IP, process tree, and target node, and can be delivered to SOC webhooks. Listed SIEM connections include Splunk, Microsoft Sentinel, Elastic Security, IBM QRadar, and ArcSight event export. The Splunk add-on includes HEC streaming, a modular input feed, and three prebuilt SOC dashboards. Telemetry is described as encrypted and HMAC-signed, with verified adversary IPs exportable to Palo Alto and Fortinet External Dynamic Lists. Enterprise users can provision self-hosted decoys across AWS, Azure, and on-premises subnets via Docker. Commercial licensing includes multi-tenant management, telemetry pipelines, SIEM connectors, and SLA-backed technical support.
For and against
For
- Agentless deployment takes under five minutes
- Synthetic lures cover multiple asset types
- Alerts include high-context telemetry
- Integrates with major SIEM platforms
- Telemetry is encrypted and HMAC-signed
Against
- Maximum decoys listed as three
- Data retention is 30 days
- Self-hosting is limited to Enterprise organizations
The verdict
DentiGrid focuses on low-footprint deception with broad lure types, SOC integrations, and webhook alerts. Its hybrid deployment and MSSP tenant management support different operating models, while licensing details and limits should be confirmed.
Who it suits
DentiGrid is intended for MSSPs and enterprise SOC teams that need decoys, SIEM connections, and isolated tenant views. Enterprise deployments can use managed or self-hosted environments.
Plans and prices
Commercial MSSP & Enterprise
Commercial licensing for MSSPs and enterprises · pricing not stated
Read 30 Sep 2026 · dectrax.com
On the record
- Alert details
- Alerts can include the origin IP, process tree, and target node, and can be sent to SOC webhooks.dectrax.com · read 30 Sep 2026
- Alerts
- Triggered lures send SOC webhooks with high-context telemetry such as origin IP, process tree, and target node.dectrax.com · read 30 Sep 2026
- API
- Dectrax documentation provides a REST API reference and an example API request for checking an IP threat status.dectrax.com · read 30 Sep 2026
- Audience
- Dectrax describes DentiGrid as designed for MSSPs and enterprise SOC teams, including multi-tenant management for MSSP operations.dectrax.com · read 30 Sep 2026
- Decoy assets
- Its synthetic lures include SSH keys, S3 buckets, Postgres tables, Kubernetes secrets, API keys, and fake Active Directory accounts.dectrax.com · read 30 Sep 2026
- Decoy types
- Its listed lures include SSH keys, S3 assets, Postgres tables, Kubernetes secrets, and API keys.dectrax.com · read 30 Sep 2026
- Deployment
- Dectrax says DentiGrid deploys agentlessly in under five minutes using RMM, Microsoft Intune, Jamf, or Ansible tooling.dectrax.com · read 30 Sep 2026
- Deployment options
- Pilot and Professional organizations connect to managed nodes, while Enterprise organizations can provision self-hosted decoys in AWS, Azure, and on-premises subnets via Docker.dectrax.com · read 30 Sep 2026
- Endpoint footprint
- Dectrax states that its lures consume 0% CPU or memory and require no agent footprint.dectrax.com · read 30 Sep 2026
- Endpoint impact
- The maker says DentiGrid lures consume 0% CPU or memory and have no agent footprint.dectrax.com · read 30 Sep 2026
- Hosting
- The documentation says Enterprise organizations can provision self-hosted decoys across private AWS, Azure, and on-premises subnets via Docker.dectrax.com · read 30 Sep 2026
- Integrations
- Listed SIEM integrations include Splunk, Microsoft Sentinel, Elastic, and IBM QRadar; the page also describes ArcSight event export.dectrax.com · read 30 Sep 2026
- Intended customers
- The maker identifies MSSPs and enterprise SOC teams as DentiGrid’s intended users.dectrax.com · read 30 Sep 2026
- Multi-tenant use
- The maker describes a multi-tenant management portal with isolated tenant telemetry views for MSSPs.dectrax.com · read 30 Sep 2026
- Purpose
- DentiGrid is a SIEM-native honeypot platform for MSSPs and enterprise SOC teams that uses decoy assets to detect adversary activity.dectrax.com · read 30 Sep 2026
- Security
- The documentation says sensor telemetry is encrypted and HMAC-signed before ingestion, and verified adversary IPs can be added to Palo Alto and Fortinet External Dynamic Lists.dectrax.com · read 30 Sep 2026
- SIEM integrations
- Dectrax lists Splunk, Microsoft Sentinel, Elastic Security, IBM QRadar, and ArcSight integrations.dectrax.com · read 30 Sep 2026
- Splunk package
- The Splunk add-on is described as including HEC streaming, a modular input feed, and three prebuilt SOC dashboards.dectrax.com · read 30 Sep 2026
