Realistic API surface
Expose believable decoy endpoints that make automated reconnaissance and abuse attempts visible.
Coming soon / private alpha
Managed API honeypots.
For security teams.
NoctisAPI is designed to help security teams observe how suspicious traffic interacts with realistic decoy API endpoints. The decoy receives HTTP and HTTPS requests, and your team can review the captured activity in a protected Security Console.
console.noctisapi.com — security console
● private alpha
// reviewing captured activity
›authorized domain / api.example.com
›decoy / payments-api
✓HTTPS request captured00:01
✓session fingerprinted00:04
✓evidence secured00:06
→ready for investigation
01Authorize
02Deploy
03Capture
04Review
01 / How it will work
From authorized domain
to useful signal.
NoctisAPI is designed to keep deployment focused and controlled. Your organization authorizes the surface; NoctisAPI operates the dedicated instance and the protected review experience.
Register interest in the private betaPRIVATE BETA / 03 STEPS IN DEVELOPMENT
01
Choose an authorized domain
Deploy the decoy API on a domain or subdomain your organization has authorized for this purpose.
02
Get a dedicated instance
NoctisAPI will deploy and operate a separate server for your organization.
03
Review captured activity
Your security team will use its own Security Console to inspect requests and investigate activity on the decoy.
Designed for authorized defensive security use.
02 / Product
Realistic decoys.
Protected visibility.
HTTP + HTTPS capture
Receive the requests that reach the decoy and preserve the context your team needs to investigate them.
Dedicated instance
NoctisAPI is designed to deploy and operate a separate server for each participating organization.
Security Console
Give your security team a protected place to review captured activity and follow suspicious behavior.
03 / Architecture
A controlled path
from request to review.
01Authorized domainYour organization chooses the surface
02Decoy APIRealistic HTTP + HTTPS endpoints
03Captured activityRequests · sessions · evidence
04Security ConsoleProtected review for your team
↳ NoctisAPI is being validated with security teams before the private beta opens.
04 / Visibility
See the first request.
Then follow the story.
Review who arrived, what they tried, and how the behavior changes over time—all from a protected Security Console built for investigation.
01Activity timeline
02Threat actor context
03Session and evidence views
05 / Pilot availability
Private alpha now.
Private beta next.
PRIVATE ALPHA
Help shape the first customer pilots.
NoctisAPI is currently in private alpha. We’re validating deployment and operations ahead of our first customer pilots. If this is relevant to your security team, leave your work email and we’ll be in touch as the private beta opens.
06 / FAQ
Clear answers.
Early-stage honesty.
Who is NoctisAPI for?
NoctisAPI is being designed for security teams that want to observe suspicious activity against realistic decoy API endpoints.
What does the private beta include?
Selected teams will help validate deployment, dedicated instances, request capture, and the protected Security Console ahead of wider availability.
Can I use it on any domain?
The decoy should be deployed only on a domain or subdomain your organization has explicitly authorized for this purpose.
Is the product available today?
NoctisAPI is currently in private alpha. The private beta will open to a limited number of teams; register your interest to hear when applications open.
Private beta opening soon
Interested in
early access?
Tell us where you want to deploy NoctisAPI and we’ll contact you when the private beta opens.