ProductsDeception Platform
Frequently asked questions
The questions we hear most often.
- How do I buy Claymore?
- Claymore is delivered through our partner network of managed service and security providers. If you already work with one, ask them about Claymore. If not, get in touch and we will introduce you to a partner who fits.
- We are an MSP or MSSP. How do we become a partner?
- Tell us about your practice through the partner form. Partners get a multi-tenant console, per-client alert routing, PSA integration, and partner pricing across their whole client base.
- Are any capabilities held back for larger customers?
- No. Every detection, certificate request blocking, automated containment, Exposure Assessment, every integration, and the full API ship to every client, with unlimited agents and decoys.
- Do we need Active Directory security expertise to run it?
- No. Each decoy has guided setup in the console, and every alert explains in plain language what was attempted and what it means. Technique names and ATT&CK IDs are there for your SOC.
- We already have Microsoft Defender for Identity.
- Keep it. The two are complementary. MDI infers attacks from behavior; a decoy interaction simply is one. Claymore also covers certificate services deception and gives providers a multi-tenant console.
- We already run network deception like Canary.
- That catches a different class of attack. Kerberoasting, DCSync, Shadow Credentials, and certificate abuse never touch a decoy host, so they need decoys in the directory itself.
- Can an attacker just avoid the decoys?
- Only by not looking. Claymore Decoys are exactly what attack tools are built to find, and they carry realistic names, ages, and attributes alongside your real objects. Skipping them means skipping the technique.
- Will automated containment lock out our own admins?
- Containment is off until you enable it, decoy by decoy. Privileged accounts, built-in accounts, and domain controllers are never touched automatically, you can add your own exclusions, and dry-run mode shows what would have happened first.
- Is there an on-premise option?
- Yes, arranged per contract because it depends on your environment. Ask your partner or contact us.
Stop tuning. Start catching.
Claymore is delivered through managed service and security partners. Bring it to your clients, or let us connect you with a partner who already runs it.