Defused Builder
Run Defused on your own infrastructure - cloud, on-prem, or hybrid. Full control, full data sovereignty.
Request Early Access#!/bin/bash # Defused Install Script for Ubuntu apt update && apt install -y ansible cd /home/ubuntu wget -O installer https://console.defusedcyber.com ./installer -e "DECOY_NAME=LOG4J-component DECOY_CVE=LOG4J"
Why Builder
Your infrastructure, your data
Everything runs in your environment. No data leaves your network unless you want it to - full control over retention, routing, and storage.
Deploys where you need it
Cloud VPCs, on-prem networks, air-gapped segments - Builder fits your topology, not the other way around.
Tailored deception
Deploy decoys, agents, and lures that match your real assets, policies, and network layout. Attackers can't tell the difference.
Deployment Outcomes
Fits your network
Aligns with your segmentation, identity model, and asset inventory - not a bolt-on that ignores how you're structured.
Plugs into your workflows
Alerts stream to your SIEM, SOAR, or ticketing system. No new dashboards to babysit.
Scales with you
Add coverage across regions, business units, and environments as you grow - without re-architecting.
Deception that runs on your terms
Builder is currently in limited release. If you're interested in self-hosted deception, reach out through our pricing page to discuss your deployment.
Request Early Access