ATDE

(Autonomous Threat Disruption Engine) Defensive honeypot · asymmetric deception · local-first containment for infrastructure you own

Type

Component

GoDocker

Documentation

Full

Setup, architecture, and how the pieces fit together.

Maintenance

Occasional

Occasional fixes, but no active roadmap.

(Autonomous Threat Disruption Engine) Defensive honeypot · asymmetric deception · local-first containment for infrastructure you own

What does this actually do?: ATDE is a honeypot that runs on your infrastructure and uses deception to detect and contain threats. It operates locally without phoning home, so you keep full control of what it sees and how it responds.
What do I need to run this?: Go and Docker. If you can build and run a Docker container, you can deploy ATDE. No external services or accounts required.
What's the documentation like?: Basic documentation is included. You'll get enough to deploy it, but you may need to read the code to understand all the tuning options.
Is this actively maintained?: No. This is a working component, but there is no ongoing maintenance. If you need to modify it or fix issues, you'll be doing that work yourself.