Evidence centre

What we know and what is missing

Literature, data and field reports answer different questions. Provenance and review depth are shown before conclusions are compared.

01 / Evidence types

Three complementary libraries

38 recordsPublished researchPapers and surveys. Records distinguish metadata, abstract and full-text review.8 recordsDatasets and labsOpen data for studying telemetry, reproducibility and experimental limits.9 recordsField reports and observationsInstitutional trials, threat research and vendor-published stories, labelled by origin.

02 / Editorial synthesis

Report, map and open questions

These syntheses link sources and make coverage limits explicit.

Research / 2026State of cyber deceptionTechniques, offerings, evidence and trends.Research / 2026Executive summaryMain decisions for security teams.Research / 2026Ecosystem mapInstitutions, software, providers and research.Research / 2026Open questionsComparable outcomes and missing evidence.

Critical reading

A record is not an independent validation.

Commercial statements remain attributed to their vendors. Metadata-only paper records are not presented as full-text analyses.

Read methodology →