Tracebit canaries cover a wide range of resources, both in and outside of AWS. You can create decoy S3 buckets in your environment, publish fake credentials to endpoints and pipelines, or even create dummy applications in your Okta instance.

Deploying Tracebit took a matter of minutes, even across multiple accounts!

After deploying, you can be confident the canary resources are set up and working correctly because you get notified whenever they aren't.

Alerts arrive in your Tracebit instance within minutes of the activity occurring, giving you confidence that any potential threats are swiftly identified and can be addressed promptly, ensuring your environment stays secure and resilient against compromised identities. I am yet to receive a false positive alert from Tracebit, further reinforcing my trust in the accuracy and reliability of their detection system. Review collected by and hosted on G2.com.

Tracebit handles canary resources and credentials effectively.

I believe their offering could be improved by incorporating automated remediation steps for critical alerts. For example, automatically applying an IAM deny policy to compromised users or roles would be valuable. While this is currently possible through integrations with third-party services like PagerDuty, it requires additional configuration and third party products. Integrating such capabilities directly into Tracebit's platform would enhance security response and reduce dependency on external tools. Review collected by and hosted on G2.com.

The product team has great ideas and very innovative approach. I resonate a lot with the mission to detect adversaries in the cloud and I like that this has become their mission as well. Their solution is growing very rapidly and they expand it with more and more capabilities. The team is super flexible and innovative and they accept and listen to new suggestions and ideas which makes them extremely nice to work with! Review collected by and hosted on G2.com.

Looking forward for the product to mature Review collected by and hosted on G2.com.

The team has a really good eye for product experience. It's the subtle things like setup flows being fluid, you don't have to poll for resources being detected by clicking a "refresh" button, it's just streamed to your page. IaC being generated for you.

The team behind Tracebit are at the bleeding edge of cloud security research, you'll often see their blog posts land on hacker news.

Onboarding was a breeze, the support was direct from the founders. Review collected by and hosted on G2.com.

Other than manual testing it's hard to prove the value of a honey pot when attacks are so infrequent. Review collected by and hosted on G2.com.

Ease of use. Customer SUpport. Easy integration Review collected by and hosted on G2.com.

Could have more native integrations but for our use case it is perfect Review collected by and hosted on G2.com.

Simple implementation.

It works well: once the decoys are deployed, if someone touches them you will be quickly notified.

Excellent UX. Review collected by and hosted on G2.com.

Nothing so far. The product works well for the purpose for which it was created. Review collected by and hosted on G2.com.

Low footprint, thoughtful approach to understanding your real threats; the team are curious and agile, tackling a real problem Review collected by and hosted on G2.com.

More coverage! More endpoints! Show me all the things in my environment Review collected by and hosted on G2.com.