What CyberTrap Software GmbH does

CyberTrap Software GmbH is an Austrian cybersecurity vendor founded in 2015 and headquartered in Vienna, specializing in AI-driven active cyber defense through deception technology. The company develops the CyberTrap Engage Platform, which combines an asset-mapping layer (CyberTrap Explorer), a threat intelligence layer (ThreatIQ with CVE and dark web monitoring), a deception deployment layer (Artifact Manager for lures, breadcrumbs, and honey tokens), an AI-powered digital twin engine (Deceptor) that dynamically engages attackers in isolated synthetic environments, and an Anomaly Detector that flags behavioral deviations with claimed >95% precision. Native integrations with Splunk, Microsoft Sentinel, CrowdStrike, Elastic, and IBM QRadar embed the platform within enterprise SOC workflows.

The company sells primarily to enterprise Security Operations Centers, government agencies, and critical infrastructure providers, targeting CISOs and security decision-makers via a consultative enterprise field-sales motion centered on demo bookings and strategy calls. Pricing is not publicly disclosed; deployment options include cloud (under 30 minutes), hybrid (one day), and air-gapped (up to three days), supporting subscription-based annual licensing. Disclosed customer references include Bosch, an unnamed German government agency, and an unnamed internet infrastructure provider.

Operationally, CyberTrap has secured small early-stage funding rounds between 2017 and 2019 (Swisscom Ventures, EIT Digital Accelerator, and an EISMEA grant of approximately $82K), operates with 11-50 employees, and is led by CEO Adi Reschenhofer (serial entrepreneur with a prior cybersecurity exit) and CTO Dr. René Heinzl (PhD in semiconductor physics, 15+ years in software AI). The company maintains a Spanish-language version of its website and explicitly positions itself for regulatory compliance with ISO 27001, GDPR, NIS 2, and DORA, signaling intent to compete in regulated European procurement cycles.

Name

CyberTrap Software GmbH

Legal name

CyberTrap Software GmbH

Website

https://cybertrap.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

CyberTrap Software GmbH is an Austrian cybersecurity vendor that sells an AI-driven deception platform (CyberTrap Engage) to enterprise SOCs, government agencies, and critical infrastructure operators, using digital twins, lures, and behavioral analysis to detect, engage, and study attackers inside isolated environments.

Ownership category

akta.pro rank

Product category

Cybersecurity Deception Software

NAICS

Security Systems Services (except Locksmiths) (561621), Software Publishers (5132)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Deception Technology & Threat Hunting (HDADAGAI)

akta.pro secondary industry

Verification & Risk Signals (Device Fingerprinting, Behavioral Biometrics) (HDADALAJ)

Keywords

• Cyber deception technology
• Active cyber defense
• Threat detection platform
• Honey token deployment
• SOC alert reduction

Headquarters

HQ city

Neustadt

HQ country

Austria

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Software Platform Subscription: CyberTrap offers its AI-driven deception platform (CyberTrap Engage) as a software solution. The subscription model is implied by the demo/pilot booking flow and the emphasis on cloud deployment (<30 minutes), hybrid (1 day), and air-gapped (≤3 days) deployment options. No perpetual licensing or freemium model is described.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

CyberTrap sells an AI-driven deception technology platform (CyberTrap Engage) that detects, engages, and traps cyber attackers inside realistic digital twin decoys across enterprise and government IT environments. The platform combines asset mapping (CyberTrap Explorer), threat intelligence (ThreatIQ), bait deployment (Artifact Manager), and an AI-powered digital twin (Deceptor) to convert intruder activity into actionable intelligence, delivered via subscription licensing with cloud, hybrid, or air-gapped deployment.

Product overview

CyberTrap offers the CyberTrap Engage Platform as a unified AI-driven active cyber defense solution. The platform is built on three intelligent layers that work in concert: (1) Discovery Layer comprising CyberTrap Explorer for asset mapping and ThreatIQ for threat intelligence including CVE analysis and dark web monitoring; (2) Engagement Layer comprising Artifact Manager for deploying lures, breadcrumbs, and honey tokens, and Deceptor as the AI-powered digital twin that dynamically engages attackers; and (3) Integration Layer providing native connectivity to SIEM/SOAR platforms including Splunk, Sentinel, Elastic, CrowdStrike, and QRadar. The platform is complemented by an Anomaly Detector that achieves >95% precision in flagging deviations from normal operations.

Differentiator

Problem solved

Functional benefit

Brands

• CyberTrap Engage Platform: The company's AI-driven proactive defense platform featuring Discovery, Engagement, and Integration layers for cyber deception and threat intelligence.
• CyberTrap Explorer
• ThreatIQ
• Artifact Manager
• Deceptor

Products and services

• CyberTrap Engage Platform The unified AI-driven active cyber defense platform consisting of three intelligent layers — Discovery (asset mapping and threat intelligence), Engagement (deception and adversary engagement via digital twins), and Integration (SIEM/SOAR connectivity) — for enterprise and government security teams.
• CyberTrap Explorer Continuously maps and fingerprints assets, users, and interactions across cloud and on-premises environments using network, cloud, and log scanners for enterprise situational awareness.
• ThreatIQ Threat intelligence module that fuses internal telemetry with global intelligence — CVE analysis, dark web surveillance, and adversary skill assessment — to profile attacker capabilities and intent for SOC teams.
• Artifact Manager Deception deployment tool that distributes lures, navigational breadcrumbs, and honey tokens (fake API keys, database records, RDP links) across enterprise infrastructure to trigger silent alerts when accessed.
• Deceptor AI-powered digital twin that creates dynamic, high-fidelity simulations of customer infrastructure with synthetic data, adapting complexity in real-time based on attacker skill level to engage and analyze intruders in a safe, isolated environment.
• Anomaly Detector AI-driven scanning component that learns the normal operational rhythm of enterprise environments and flags deviations with claimed >95% precision to detect subtle signs of compromise before escalation.

Quantifiable outcome

• Dwell time reduced from weeks to hours/days
• +4 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability5 records

Feature6 records

Partnerships

Five partnerships are on record, tiered core.

• SplunkcoreTechnology or IntegrationNative, out-of-the-box integration with Splunk SIEM platform. CyberTrap delivers structured, high-confidence alerts directly into Splunk workflows. This integration supports automated playbooks, incident enrichment, and compliance reporting.
• Microsoft SentinelcoreTechnology or IntegrationNative integration with Microsoft Sentinel for seamless alert delivery and workflow automation. Supports automated incident response and enrichment within the Sentinel ecosystem.
• CrowdStrikecoreTechnology or IntegrationIntegration with CrowdStrike endpoint protection platform for enhanced threat detection and response coordination across the security stack.
• ElasticcoreTechnology or IntegrationIntegration with Elastic security platform for log analysis, threat detection, and security analytics. Enables enriched alerts and streamlined security operations.
• IBM QRadarcoreTechnology or IntegrationIntegration with IBM QRadar SIEM platform for security information and event management, supporting compliance workflows and automated incident response.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Microsoft Defender XDR: Microsoft's integrated XDR suite (Defender for Endpoint/Identity/Cloud Apps, Sentinel). Existing Sentinel integration partner of CyberTrap but also a platform consolidation threat to stand-alone deception vendors.
• Palo Alto Networks Cortex: Cortex XSIAM/XDR platform with AI-driven SOC automation and detection capabilities. Comparable enterprise SOC buyer and integrated detection/response positioning, with potential to absorb deception use cases over time.
• SentinelOne: AI-powered endpoint and XDR platform (Singularity) with autonomous detection and response. Overlaps with CyberTrap on AI-driven threat detection and enterprise SOC buyer, though broader in scope than deception-only.
• Darktrace: AI-driven cybersecurity vendor with self-learning threat detection across network, cloud, and endpoints (Antigena). Comparable AI-driven detection/response positioning and SOC buyer overlap, but at much broader scale than CyberTrap.
• Vectra AI: AI-driven network detection and response (NDR) vendor focused on attacker behavior analytics. Comparable AI-driven threat detection positioning and enterprise SOC buyer base, with broader platform coverage than CyberTrap's deception focus.
• CrowdStrike: Leading endpoint/cloud security platform with Falcon XDR, identity protection, and (via acquisitions) deception-adjacent capabilities. Existing integration partner of CyberTrap but also a potential platform competitor as deception features expand in-suite.

Direct peers

• Acalvio Technologies: US-based provider of AI-driven deception technology (ShadowPlex) for active cyber defense and threat hunting. Closest direct competitor to CyberTrap Engage in deception-based detection, serving enterprise SOC teams.
• CounterCraft (Akamai): Spain-based deception technology vendor (acquired by Akamai) offering The Genio Platform for cyber threat intelligence and adversary engagement. Direct competitor in the European deception market with overlapping product positioning.
• Smokescreen Technologies: Deception technology vendor (IllusionBLACK/active defense platform) targeting enterprise SOCs and MSSPs. Directly comparable product category with similar honeypot, breadcrumb, and decoy approach to deception.

Emerging players

• Cymulate: Breach and attack simulation (BAS) and continuous automated red-teaming platform. Adjacent to deception in proactive defense, sharing buyer (SOC/CISO) and complementary use cases such as threat validation and SOC optimization.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds3 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyberTrap Software GmbH