SYS.GRID: SYNTHETIC DECEPTION FLEET ONLINESIGNAL: 100% HOSTILE · EDGE: CLOUDFLARE WORKERD + R2
AUTONOMOUS DECEPTION GRID · R2 PARQUET DATAMART

WE RUN THE FAKE ORGS.
YOU HARVEST THE INTRUDERS.

Babysitting decoy Active Directory forests sucks. FakeOrg operates autonomous synthetic corporate networks, strips victim OPSEC, and pipes 100% hostile attacker telemetry into byte-range queryable Parquet files on Cloudflare R2.

r2://fakeorg-datamart/_manifest.jsonSTANDBY
No _manifest.json in R2 yet. Seed a sample partition on /samples or upload _manifest.json from your honeynet ingestion job to display live adversary intercepts here.
0
R2 Parquet Partitions Online
0
Captured Events (R2 Metadata)
0 B
Total R2 Datamart Volume
Awaiting ingest
Latest Partition Ingest

Zero-Noise Signal

Zero legitimate employees exist inside a FakeOrg synthetic enterprise. Every shell command, lateral movement probe, and dropped binary is 100% adversary activity.

OPSEC Sanitized

Decoy domains and RFC 1918 subnets are deterministically pseudonymized before egress while attacker IPs, ASNs, JA4 hashes, and C2s remain 100% raw.

Edge R2 Parquets

Cloudflare Workers stream .parquet row groups over byte-range requests so DuckDB httpfs and Polars query at the edge without pulling full files.

Latest Engineering Dispatches

View all dispatches →