Security Software — Labyrinth
Labyrinth
Deception Platform
Built to defeat hackers. It protects your assets by detecting and stopping server attacks — a Ukrainian deception technology, used even by financial and national institutions.
Background
Traditional defenses alone
can no longer protect you.
Cybercriminals are growing ever more advanced and sophisticated. Traditional measures such as firewalls and endpoint protection are not enough to stop hackers and protect confidential data from leaks.
Advanced threat-detection for enterprise IT networks has become essential to protecting organizations. Ukraine, where this software was developed, is a nation with highly advanced cybersecurity technology.
Product
Product overview
Labyrinth is a deception-based threat-detection technology that detects and blocks cyberattacks inside enterprise networks. It proactively defends networks against targeted attacks, advanced unknown threats, botnets, zero-day exploits, and insider threats.
Easy to deploy in any environment — virtual, physical, or hybrid — it detects threats without constant monitoring or generating massive data. It provides a detailed attack timeline with event correlation, supporting smarter, faster decisions.
Key Features
Key features
Early detection of threats in the network
It catches threat behavior while attackers are still mapping the network and seeking targets, collecting details on the source, tools used, and exploited weaknesses — while real assets and services keep functioning unaffected.
Accurate alerts
Under 1% false positives. A Labyrinth point raises no alert unless touched; since no one should ever touch it, every interaction is treated as exceptional and suspicious. No digital noise.
Rapid incident response
Indicators of compromise (IoC) sync automatically with your threat-prevention tools, so you can understand attacks, run forensics, respond with confidence, and build better defenses for the future.
Proactive defense
Beyond stopping attacks, deception artifacts lure attackers into an isolated environment for observation, giving deep insight into their tools and techniques.
Targeted-attack detection
Lure hackers and insiders into a false sense of security to learn their skills and motives, build the most accurate attacker profile, and apply the best countermeasures.
Post-breach detection
A reliable warning system against attacks that bypass perimeter defenses. Seeder Agents mimic “tasty” artifacts to lure attackers into the trap.
Lateral-movement detection
Detects early reconnaissance, credential theft, and lateral movement — making this threat, complex for traditional tools, visible at an early stage.
Reduced dwell time
Honeypots, decoys, and breadcrumbs cut attacker dwell time, stopping attacks before they reach critical assets.
Architecture
Architecture
- 01Seeder Agent
Placed on servers and workstations, it mimics the artifacts most tempting to attackers and steers them toward a Point.
- 02Point (high-interaction honeypot)
It mimics content/services relevant to each environment segment, keeping attackers inside Labyrinth until all needed intelligence is gathered.
- 03Management Console
It analyzes intelligence from Points for incident response, notifying the security team and relaying the needed information.
- 04Incident Response Platform
It cross-checks metadata against external databases and accelerates response via third-party integrations that automate isolation, blocking, and threat hunting.
Characteristics
Key characteristics
High-interaction honeypot
Runs real OSes, apps, and services with fake data. It lets attackers log in and observes them over time, collecting valuable data on their tools and techniques.
Multi-layer security
Low-interaction artifacts on the first line repel opportunistic attacks, while high-interaction decoys quietly detect advanced threats.
Diverse, authentic Points
Emulates real OS images and services for IoT, POS, ICS, and telecom environments — blending into production and designed to be chosen as attacker targets.
Customization
Developed for specialized industry needs such as IoT, SCADA, and POS, with maze paths and Points continually updated as new threats are found.
Automation
Automatically identifies hosts, services, and connection paths to streamline decoy/honeypot creation and deployment — delivering high security from day one.
Scalability
Each Point is a lightweight process on a VM, so it scales efficiently across large distributed networks without depending on processing resources.
Talk to us about deploying Labyrinth
The most efficient tool to detect and stop hackers. We welcome your deployment inquiries.
Contact →