Scope
We include public resources relevant to defensive decoys, deception and adversary observation. Related areas such as moving target defense are labeled separately. We show review dates and depth; source language is recorded when verified.
How a resource is added
- We identify the original source and check its URL, authorship and date.
- We classify technique, environment and resource kind.
- We write an original summary bounded by the source.
- We record whether we read a product page, repository documentation, publisher metadata, abstract or full text.
- An editor reviews changes before publication.
Review depth and claims
We distinguish public page, repository metadata, publisher metadata, abstract and full text. This describes reviewed material, not product quality. Every claim stays within its source. The first 30 critical-reading notes state a limitation and an open question per record; they are not independent tests.
Verifiable global coverage
We separately record organization country, regions where a resource is offered or used, sector and source language. If a source does not support a value, it stays “unknown”. The coverage map publishes missing data and never treats it as absence of an offering.
See the map and missing data →
Comparison
We do not rank products by effectiveness from commercial pages. A comparison records the same scenario, baseline, investigable signals, missed alerts, false positives and operating load. We publish the protocol and a reusable template.
Corrections and interests
We accept suggestions and corrections with a primary URL. Vendor submissions are attributed and receive no preferential treatment. The editor checks source, scope and potential conflicts before publication. Federico Pacheco, the Atlas owner, contributed to BUDA, DOLOS-T and Cyber Deception Playground; those six records carry a visible disclosure and are not presented as independent evaluations. A correction changes a record through editorial review; automated discovery only creates a reminder.
Limits
Coverage grows in stages. A metadata-only record is not a full paper analysis. Vendor-published experiences retain that attribution. Fields without public evidence remain empty. The catalog is not a worldwide census.
Glossary
Decoy system or service recording unauthorized interactions.
Decoy data that triggers an alert when accessed or used.
Asset resembling a real resource to divert or observe activity.
Planned defensive activities to observe and influence an adversary.
Deliberate change to environment characteristics that makes reconnaissance harder; labeled as a related area when applicable.