Know the moment an attacker touches your credentials.

Plant decoy AWS keys, database URLs, and API tokens across your code, configs, and CI. The instant one is used, Veil detects it, fingerprints the attacker, and issues a signed breach certificate. Decoys are quantum-seeded (simulated by default; real hardware on request), with a CSPRNG fallback.

Plant Your First DecoyHow It Works

How Veil works

Step 1
Plant decoys
Generate fake AWS keys, DB URLs & API tokens; drop them in repos, .env files and CI secrets
Step 2
Attacker bites
Someone finds a decoy and tries to use it against a Veil listener
Step 3
Detect & alert
Veil fingerprints them, signs a breach certificate, and alerts you in seconds

A real credential is never used by an outsider — so the moment a decoy is, you have a high-signal breach alert with almost no false positives.

Quickstart — mint a decoy from the API

# 1. Create an API key in your dashboard → API Keys export QNTYX_KEY="qntyx_veil_…" # 2. Generate a decoy AWS credential to plant curl -X POST https://veil-api.qntyx.io/api/v1/credentials/generate \ -H "Authorization: Bearer $QNTYX_KEY" \ -H "Content-Type: application/json" \ -d '{"type": "aws", "plant_location": "github:acme/infra/.env"}'

You get a realistic-looking key plus a quantum entropy proof. Commit it where an attacker would look.

What Veil gives you

Decoy credentials

Realistic AWS keys, Postgres URLs, and API tokens — each carrying an invisible watermark so shared copies stay traceable.

Fake listeners

AWS, Postgres, and REST endpoints that answer like the real thing, with quantum-random timing jitter so honeypot-detection tricks fail.

Attacker fingerprinting

Every trigger captures JA3, headers, request cadence, and GeoIP, cross-checked against AbuseIPDB.

Signed breach certificate

Each event produces a tamper-evident, HMAC-signed certificate tying the breach back to the decoy's quantum origin.

Watermarking + shared threat feed

Every decoy hides a zero-width watermark encoding who planted it and where — so if an attacker copies or resells it, you can still trace the leak. Opt in to the shared threat feed and every member benefits from fingerprints the network has already seen.

Zero-width watermark · HMAC-SHA256 breach cert · opt-in threat intel

Pricing

Scout
Free
  • Up to 5 decoy credentials
  • Email breach alerts
  • Signed breach certificates
Get Started
Sentinel
$49/mo
  • Up to 50 decoys
  • Webhook + email alerts
  • Attacker fingerprinting
  • Shared threat feed access
Start Free Trial
Fortress
$199/mo
  • Unlimited decoys
  • All alert channels
  • Full threat-feed contribution
  • Priority support + SLA
Contact Sales

Plan tiers (Scout / Sentinel / Fortress) and their limits are live in the product. Dollar prices shown are proposed — confirm before launch.

QNTYX
quantumrand.dev →