Three steps, one afternoon
Install the agent, place your decoys, and Claymore runs quietly in the background until someone takes the bait.
- 01
Install the agent
One command on each domain controller and certificate authority. The agent registers itself.
- 02
Place your Claymore Decoys
Choose decoys from the console. Claymore deploys them and keeps checking they are still in place.
- 03
Get alerted
Any interaction reaches your team within seconds, with the account, source, and technique attached.
When a decoy is touched
One interaction is all it takes
Whether someone requests a decoy's credentials, enrolls against a decoy template, or modifies a decoy computer, Claymore raises an alert naming the account responsible, where it came from, and what it targeted.
That alert reaches Slack, email, your SIEM, your PSA, or any webhook within seconds. Certificate requests against a decoy are denied outright. If you have switched on automated containment, the account responsible is disabled before anyone reads the alert.
Claymore keeps checking every decoy long after install, so you hear about drift before it becomes a gap.
Stop tuning. Start catching.
Claymore is delivered through managed service and security partners. Bring it to your clients, or let us connect you with a partner who already runs it.