Know the moment an attacker touches your credentials.
Plant decoy AWS keys, database URLs, and API tokens across your code, configs, and CI. The instant one is used, Veil detects it, fingerprints the attacker, and issues a signed breach certificate. Decoys are quantum-seeded (simulated by default; real hardware on request), with a CSPRNG fallback.
How Veil works
A real credential is never used by an outsider — so the moment a decoy is, you have a high-signal breach alert with almost no false positives.
Quickstart — mint a decoy from the API
You get a realistic-looking key plus a quantum entropy proof. Commit it where an attacker would look.
What Veil gives you
Decoy credentials
Realistic AWS keys, Postgres URLs, and API tokens — each carrying an invisible watermark so shared copies stay traceable.
Fake listeners
AWS, Postgres, and REST endpoints that answer like the real thing, with quantum-random timing jitter so honeypot-detection tricks fail.
Attacker fingerprinting
Every trigger captures the source IP, user agent and header signature, enriched with GeoIP and network operator and cross-checked against AbuseIPDB.
Signed breach certificate
Each event produces a tamper-evident, HMAC-signed certificate tying the breach back to the decoy's quantum origin.
Watermarking + shared threat feed
Every decoy hides a zero-width watermark encoding who planted it and where — so if an attacker copies or resells it, you can still trace the leak. Opt in to the shared threat feed and every member benefits from fingerprints the network has already seen.
Pricing
- Up to 50 decoys
- Webhook + email alerts
- Attacker fingerprinting
- Shared threat feed access
- Unlimited decoys
- All alert channels
- Full threat-feed contribution
- SLA + dedicated support
Plan limits are enforced in the product. Prices are billed monthly and can be cancelled at any time.