Deception Planner

Traditional data center and office network environments where the organization owns and manages physical infrastructure, including servers, switches, and firewalls. Deception in on-premise environments offers maximum control over network topology and asset configuration.

Deception within AWS cloud infrastructure leveraging EC2 instances, VPCs, S3 buckets, IAM policies, and other AWS-native services. Cloud deception in AWS benefits from programmatic provisioning via CloudFormation or Terraform.

Deception within Azure cloud environments utilizing Virtual Machines, Virtual Networks, Azure AD, Storage Accounts, and Azure-native security services. Particularly relevant for organizations with Microsoft-centric IT estates.

Deception within GCP environments using Compute Engine instances, VPC networks, Cloud Storage, and IAM. GCP deception leverages the platform's strong networking and identity capabilities.

Combined on-premise and cloud environments connected via VPN, Direct Connect, or ExpressRoute. Hybrid deception must address the seams between environments where adversaries often find opportunities.

Operational Technology and Industrial Control System environments including SCADA systems, PLCs, HMIs, and industrial networks. OT deception requires specialized protocol emulation and careful isolation to prevent impact on physical processes.