Dectrax
MANAGED SERVICES & SOC OPERATIONS

Multi-Tenant Threat Deception for MSSPs & SOC Teams

Provide client environments with high-fidelity deception telemetry and automated threat intelligence feeds managed from a multi-tenant portal.

Talk to Security EngineeringExplore DentiGrid Platform

The alert fatigue problem in managed security

Security Operations Centers (SOCs) and Managed Security Service Providers (MSSPs) face thousands of unverified alerts daily across customer networks. High false-positive rates delay analyst response times during critical incidents.

Generic SIEM correlation rules create noise, causing analysts to spend hours triaging benign events.

Deploying traditional agents across client networks adds friction and client maintenance overhead.

MSSPs require tenant isolation to keep customer telemetry separate while maintaining centralized visibility.

Multi-tenant isolation for MSSP operations

DentiGridDeception & Intelligence

DentiGrid provides a multi-tenant deception platform designed for MSSPs. Decoy nodes are deployed into client networks using lightweight RMM rollout scripts. Probes against decoy nodes produce confirmed interaction telemetry with zero internal false alarms.

GATEEdge Proxy Enforcement

GATE can be deployed at edge reverse proxies for client web applications, consuming DentiGrid threat intelligence feeds to filter malicious IPs before requests reach client applications.

SYSTEM TOPOLOGY & DATA FLOW
     CLIENT A ENVIRONMENT                CLIENT B ENVIRONMENT
  +-----------------------+           +-----------------------+
  |  DentiGrid Node (A)   |           |  DentiGrid Node (B)   |
  +-----------+-----------+           +-----------+-----------+
              |                                   |
              +-----------------+-----------------+
                                |
                                v
                   DentiGrid Multi-Tenant Gateway
                   (HMAC Telemetry / D1 Storage / Queues)
                                |
                                v
                   Centralized MSSP Operations Console
                   + Splunk & Sentinel Connectors
                   + Exportable EDL Blocklists

Sanitized Observation Telemetry — Multi-Tenant Lure Probe

Telemetry Observation Record
Sensor: client-b-http-trap-01
Tenant ID: tenant_client_b
Timestamp: 2026-08-14T22:15:08Z
Source IP: 203.0.113.88
Target Service: HTTP Decoy (/v1/api/auth)
Alert: Confirmed Adversary Probe (HMAC Verified)
Action: Dispatched to Central MSSP Console & Client B Sentinel Workspace

How threat telemetry flows from client networks to SOC analysts

1

The MSSP rolls out DentiGrid decoy nodes across Client A and Client B subnets using RMM scripts.

2

An attacker scanning Client B interacts with a decoy HTTP service.

3

The sensor generates signed HMAC telemetry and forwards it to the DentiGrid processing gateway.

4

Alert is dispatched to the MSSP central console and Client B SIEM, while the source IP is exported to EDL blocklists.

What your SOC team receives

Multi-tenant management portal with isolated tenant telemetry views.
Pre-built integrations for Splunk, Microsoft Sentinel, and Elastic SIEM.
Turnkey RMM deployment scripts for client endpoint rollouts.
Exportable EDL endpoints for automated firewall blocklist updates.

Security Stack Integration

DentiGrid feeds high-confidence alerts directly into existing SIEM and ticketing tools, reducing triage time for SOC analysts.

COMMERCIAL POSITIONING

Commercial support for managed service providers

MSSPs can deploy the open-source GATE proxy independently for client projects. Commercial Dectrax licenses include the multi-tenant DentiGrid management portal, telemetry processing pipelines, SIEM connectors, and SLA-backed technical support.

Discuss your environment with our team

Consult directly with Dectrax security engineers to review deception node placement and edge proxy deployment specs for your network.

Talk to Security EngineeringExplore DentiGrid