Parallax Deception
Cyber deception operations · self-hosted

Run deception as an operational capability.

Parallax turns threat hypotheses into reviewed deployments, observable interactions and defensible evidence—without an AI deciding what to deploy.

Enterprise available now Community coming soon
OPERATION / 017
  1. 01HypothesisAPT29 targets identity infrastructure
  2. 02PlacementReviewed decoys, honeyusers and tokens
  3. 03InteractionT1078 observed · source promoted to IoC
  4. 04EvidenceATT&CK coverage, STIX 2.1 and checksum manifest
DECISION MODELDeterministic
Runs in your environmentATT&CK + Engage nativeOperator-approved actionsEvidence you can export
One operational record

From what you expected to what the adversary actually did.

Design, deployment, rules, interactions, cases and measured results stay connected inside the same operation.

Parallax impact centre with ATT&CK coverage, observed techniques, indicators, rule decisions and deployed infrastructure status.
Impact centre with data from the example operations included with the platform.
Choose how to operate

One platform. Three ways to adopt it.

Start with the commercial platform now, bring BASE4 into the operation, or follow the upcoming open Community Edition.

Coming soon01 / COMMUNITY

Community

The open foundation for teams that want to run and extend Parallax themselves.

  • Self-hosted
  • Complete operational core
  • Deterministic rules and open exports
Explore Community
Available now03 / MANAGED

Managed Operations

The Enterprise platform plus the team that designs, deploys and evolves the operation with you.

  • Joint operation design
  • Deployment and tuning
  • Monitoring, rotation and closeout
Explore Managed Operations
Platform loop

Design. Deploy. Observe. Decide. Prove.

Every stage is inspectable and tied to an operator-approved objective.

  1. 01

    Design the belief

    Start from CTI, an adversary and the assets worth protecting. Walk the scenario before placing anything.

  2. 02

    Review the placement

    Generate confirmable plans for decoys, identities, tokens and files. Nothing deploys because a model suggested it.

  3. 03

    Observe the interaction

    Normalise telemetry, promote indicators and open cases with the evidence that produced them.

  4. 04

    Measure the result

    Compare expected and observed techniques, preserve evidence and feed the next hypothesis.

See how the platform works
A different signal

A honeypot tells you someone touched it.
An operation tells you what they believed, what they did next, and whether your controls held.

Enterprise evaluation

See Parallax against your environment.

Tell us what you need to detect, integrate or govern. We will show you the product, map the deployment and define the right operating model.

Enterprise and Managed Operations are delivered by BASE4 Security.