PRICING
Cybersecurity is a necessity, not a luxury. You pay per decoy, per month, and the rate goes down as you add more. Detection, investigation and response come with every band. No agents to install, cancel any time.
Decoys an intruder cannot resist, the investigation when one is touched, and the response.
What you show the internet, what to fix first, and a decoy where you cannot fix it yet.
Responds throughBills in euros · VAT where it applies · Vantuz Ltd, London
EVERYTHING WE OFFER
The whole product, listed. Nothing here is an add-on with a price of its own.
YOUR NUMBER
Tell us roughly how many decoys you would place and what you run, and we reply with a flat monthly price, usually within the hour. Or book thirty minutes and we work it out together.
A credential, document, link, package or browser session that looks real but has no legitimate use. No employee should ever touch it. The moment someone does, you have a signal worth reading.
Because it is the one number you control and understand. A larger company places more decoys and pays more per month; a small one places a handful and pays little. There are no per-seat or per-alert fees and no data-volume tiers.
Most small companies start with five to ten: a database credential in a backup script, a document on the shared drive, a hostname in the VPN runbook, a decoy document in the AI assistant's knowledge base, a link in the wiki. The Sonar suggests where the next one should go.
Every paid band includes every format, all eleven; the browser session decoy is in early access. Free has three: URL beacon, DNS hostname and Document tracker.
Both rest on a real AWS access key that is not allowed to do anything: AWS answers only the identity check and refuses every other call. The AWS credential is that key; the CI/CD secret is a pair of GitHub Actions repository secrets holding such a key. When someone uses the key, the use is recorded by AWS itself, Vantuz is told and you get an alert, usually within a few minutes and often within seconds. In our live tests Vantuz saw the use as soon as 3 seconds after it happened, and the alert email arrived about 21 to 28 seconds after use; that is what we measured, not a guaranteed time. Reading or copying the key does not fire it; using it does. One honest limit: every decoy key lives in one Vantuz AWS account, so someone who has already seen one could recognise another without using it.
Each one is an AI configuration decoy: a key plus an API address on your own verified domain. It fires when a tool uses the planted configuration. The tool gets the provider's ordinary "out of credit" answer, and you get an alert naming the tool, the model it asked for, the country and the network. In our live tests the alert email arrived about 20 seconds after use; that is what we measured, not a guaranteed time. One honest limit: a key copied and used directly at OpenAI or Anthropic is not seen.
No. Vantuz is fully agentless. You place decoys by hand or through our API in minutes, and the Exposure Sonar checks your domains from the outside.
It is in early access on every paid band, and we are bringing companies on in small groups. Each browser that joins holds one fake session and counts as one decoy in your band. Request early access and we will tell you when your workspace can use it.
While it is in early access it is included in every band, free included, for the domains you prove. We will announce per-domain pricing before it changes.
When a decoy fires and the risk score exceeds your threshold, Vantuz can run response actions you pre-authorised, such as a Cloudflare block or a count-first AWS WAF rule. AI explains and recommends; it never makes a destructive decision by itself.
It helps with the evidence. Vantuz creates high-confidence detection signals, a timeline, attacker context, response notes and an incident dossier your team can use when assessing Article 23 duties. It does not make you compliant on its own, and we will not tell you it does.
Yes. Monthly plans can be cancelled at any time and stop at the end of the billing period. If we change the Terms materially and you do not accept, you can leave with a pro-rata refund.
You receive an alert and can move to the next band or archive existing decoys. We never delete decoys silently.
The core Vantuz data plane runs in the EU. Some enrichment and AI sub-processors may process limited data outside the UK/EEA under the safeguards described in our Privacy Policy.
SEE IT LIVE
Thirty minutes, your environment. We plant a decoy, trigger it on purpose,
and you watch the whole response happen. No slides.