DentiGrid vs TANNER

DentiGrid is a paid, hybrid SIEM-native honeypot platform for MSSPs and enterprise SOC teams. It uses synthetic decoys such as SSH keys, S3 buckets, Postgres tables, Kubernetes secrets, API keys, and fake Active Directory accounts to detect unauthorized activity. Dectrax says deployment is agentless, takes under five minutes, and uses RMM, Microsoft Intune, Jamf, or Ansible tooling. Lures are stated to consume 0% CPU or memory. Triggered alerts can include origin IP, process tree, and target node, with delivery to SOC webhooks. Listed SIEM integrations include Splunk, Microsoft Sentinel, Elastic Security, IBM QRadar, and ArcSight. Telemetry is encrypted and HMAC-signed, and verified adversary IPs can be added to Palo Alto and Fortinet External Dynamic Lists. Enterprise organizations can provision self-hosted decoys in AWS, Azure, and on-premises subnets via Docker. Commercial licensing includes multi-tenant management, telemetry pipelines, connectors, and SLA-backed support. The listed maximum is three decoys with 30-day retention.

TANNER has no write-up on Specifiction yet; its figures are above.