Tracebit

New research: what happens when you misdirect AI attackers instead of blocking them? Kimi K3 vowed to "be disciplined about it." With all nine decoy types in place, it reached zero objectives in ten runs. Full research: agentic.tracebit.com/factory

A busy week of team socials across both our London and New York offices! If you're after a team to join this autumn, we're hiring: tracebit.com/careers

Today, Tracebit is sharing research that shows the power of deception to derail offensive AI attacks: slowing attackers down, driving up their costs and stopping them from reaching their objectives. Read the research: agentic.tracebit.com/factory

Stolen build credentials can put everyone who depends on your software at risk. Our latest blog explains how canaries help detect credential misuse and introduces the Tracebit Open Source Program. Read the announcement: https://tracebit.com/blog/announcing-tracebit-open-source-program

Docker, ClickHouse, and Redis are among the first participants in the Tracebit Open Source Program. Join them for unlimited free canary tokens across your public open-source repos. Find out more: https://tracebit.com/open-source-program

We're at SecTor! 👋 Ryan and Bruce are at Booth 534 in the Business Hall. Come see how Tracebit deploys canaries across your cloud accounts to detect breaches in seconds. We're here today and tomorrow - see you soon!

If you’re at SecTor, a quick reminder that Bruce is speaking in half an hour about detecting and disrupting AI attackers in the cloud! 📍 Room 718AB 🕦 11:35am EDT See you there!

CISA's decoy guidance puts honeytokens in the low-complexity column: "any interaction strongly suggests malicious or otherwise unauthorized activity." How to act on it this afternoon below: https://tracebit.com/blog/cisa-decoy-guidance-assume-breach

We're heading to Toronto for SecTor! 🚀 Booth 534 in the Business Hall. Bruce is speaking Tuesday at 11:35am in Room 718AB on detecting and disrupting AI attackers in the cloud. See you there!

CISA’s new guidance puts cyber decoys alongside Zero Trust. Andy Smith looks at what it means for security teams, how canaries disrupt attackers, and how to get your first one live in an afternoon. https://tracebit.com/blog/cisa-decoy-guidance-assume-breach

Does stripping an AI model's safety guardrails make it a better attacker? In our AWS cyber range, abliterated Qwen was slower and clumsier than the original. Its one escalation to admin took 84 minutes and 718 API calls. https://tracebit.com/blog/context-bombs-against-abliterated-ai-models

Attackers posing as AI crawlers grabbed canary credentials and tried them in Amazon Bedrock within 10 seconds. Tracebit Community Edition flagged the attempts. Read the full write up: https://ai.rud.is/posts/2026-09-03-grokbot-canary-bedrock

Gateway end-to-end check after the idempotency fix. Please ignore. 17:07 UTC.

What about “abliterated” open-weight models? After our Context Bombs research in July, we were asked if we could still stop an AI attacker whose model had been modified to strip out its guardrails. TLDR: we can. Read the write up here: tracebit.com/blog/context...

Grafana Labs expanded their canary coverage with Tracebit, gaining richer investigation context and reducing maintenance overhead. Read how they scaled canaries across their workloads 👇 medium.com/grafana-labs...

The team had a great time at Blue Team Con in Chicago yesterday! If you enjoyed stopping by our booth and want to chat more about how canaries fit into your stack, book a demo with us: tracebit.com#demo

Alessandro Brucato (Security Researcher) will be speaking at fwd:cloudsec London, on Tuesday 8 September. He'll be talking through our research, where we pointed 10 frontier models at a realistic AWS environment and measured the impact of deception on their attacks. Main Room, 2:10 PM.

We're heading to Chicago to attend Blue Team Con! We'll be at our booth at the Swissôtel on the 12th & 13th of September, showing how security canaries can strengthen your detection posture. See you there!

We're heading to fwd:cloudsec Europe on the 7th and 8th of September! 🚀 If you're around, come say hi at the Tracebit table 9 at the Park Plaza Victoria in London. We'll be showing how security canaries can detect breaches the moment attackers move through your environment. Looking forward to it!

If you're using ISO 27001 to guide your security program, check out Bryan O'Neil's latest article, presenting how Tracebit canaries can help provide evidence across 12 controls, while supporting 14 additional controls. Read more: tracebit.com/blog/complia...

The team had a great time running the Jumpstart 5km yesterday! 🏃 We've got some very speedy teammates. Shout out to Abdul Mettioui who's as fast chasing PBs as he is chasing pipeline, and won our team competition. Fancy joining the fun? We're hiring: tracebit.com/careers

We’ve opened up self-serve trials for Tracebit Enterprise 🚀 You can now try out our enterprise platform free for 14 days. No payment details needed. tracebit.com/pricing

"Deception is here, and it's one of the most effective tools we have to counter attacking agents." - Gadi Evron Don't just take Gadi's word for it - come see the research for yourself. Meet the team behind context bombs: canaries that stop AI attackers. At DEF CON, Booth 1406 today! 💥

It was great to present our latest research - Context Bombs: Stopping AI Attackers, at Black Hat. If you're still in Las Vegas and want to learn more, we'll be at DEF CON today at Booth 1406! Research here: agentic.tracebit.com/context-bombs/

The team are on their way to Las Vegas for @blackhatevents.bsky.social ! 🚀 There's still time to book a meeting with us. Whether you're at Black Hat or DEF CON, we'd love to chat about how deception can power your Assume Breach strategy. Sign up: tracebit.com/event/black-...

We're at Black Hat USA in Las Vegas, 4-6 August 🚀 Find us at Booth 5911 in the Business Hall to talk security canaries and how they fit an Assume Breach strategy. Alessandro Brucato will be presenting our canaries vs AI agents research Wed 5 Aug, 14:40, StartUp City Theatre. See you there!

Today, we are launching two new features - Context Bomb Canaries and AI Posture. Both come straight off the back of our recent research into how AI agents attack cloud environments. Read more: tracebit.com/blog/context...

🎙️ Episode 5 of Canaries in the Wild is live with Ollie W., CTO of the UK's National Cyber Security Centre, the security mission of GCHQ. Full episode: youtu.be/NxfSBHmZC_4?...

Excited to be part of the Google for Startups Gemini Startup Forum: Cybersecurity cohort! Looking forward to meeting the other startups in the space, alongside experts from Google Cloud Security and Google DeepMind. See you at Google London in September! 🚀

New episode of Canaries in the Wild: Ollie Whitehouse, CTO of the UK's National Cyber Security Centre. 23 years in deception, from running honeypots in 2002 to catching state adversaries and a criminal zero-day, now leading NCSC's deception programme. Watch: www.youtube.com/watch?v=NxfS...

We will be attending Summercon this Friday and Saturday 🚀 Look forward to seeing you there!

AI agents move through cloud faster than any human attacker. In our research, they reached admin in an average of just 14 minutes. The priority shifts: not just preventing breaches, but detecting and containing the ones that get through, fast. Webinar: www.youtube.com/watch?v=ThS5...