Question 1

What is HorasEye?

Accepted Answer

HorasEye is a cybersecurity honeytoken platform. You plant realistic decoy credentials (fake AWS keys, API tokens, DNS callbacks, documents, and more). When an attacker finds and uses one, HorasEye alerts you instantly. It is built for security and cybersecurity teams that need high-confidence attacker detection without noisy false positives.

Question 2

How does HorasEye work?

Accepted Answer

You create a honeytoken (a fake credential, document, DNS name, or tracking URL) and plant it where an attacker might find real secrets. When someone uses it, the request hits our detection engine. We alert you instantly with source IP, location, timestamp, and which token was touched. No agents on your network and no log parsing required.

Question 3

How fast can I deploy my first decoy?

Accepted Answer

Most teams deploy their first honeytoken in about two minutes: sign up, pick a token type, download or copy the decoy, and place it in a repo, config file, or shared drive. There is no infrastructure to provision on your side.

Question 4

Are honeytoken alerts really zero false positives?

Accepted Answer

For token triggers, yes, in the practical sense that matters. Legitimate users and automated systems should never touch a decoy you planted deliberately. If it fires, someone unauthorized interacted with it. That is why honeytokens are one of the highest-confidence signals in security.

Question 5

Do I need to install anything on my servers?

Accepted Answer

No. HorasEye runs as a cloud service. You generate tokens from the dashboard, deploy them yourself, and we handle detection when they are used. DNS callbacks, HTTP beacons, and document lures all call back to our platform. No agent deployment required.

Question 6

What types of honeytokens can I create?

Accepted Answer

DNS callbacks, HTTP tracking URLs, AWS IAM and S3 honeytokens (Pro+), Azure login certificates (Team+), GitHub PATs, supply-chain tokens, PDF and Office documents, QR codes, and MySQL dump lures. Each type is designed to blend into real environments where attackers hunt for credentials.

Question 7

Where should I place honeytokens?

Accepted Answer

Anywhere an attacker searches for secrets: GitHub repos, CI/CD configs, internal wikis, S3 buckets, backup folders, developer laptops, and file shares. The best placements mirror where your real credentials live, with decoys mixed in.

Question 8

Can I integrate alerts with my existing tools?

Accepted Answer

Email alerts are included on every plan. Pro adds Slack and Discord. Team and Enterprise add custom signed webhooks (Tines, SOAR, your own endpoint) plus SIEM integrations (PagerDuty, Splunk, Datadog). Alerts include rich context so you can forward them to chat or your ticketing system.

Question 9

What is the AI incident response agent?

Accepted Answer

Included on Team and Enterprise. On Free and Pro it is a €49/mo add-on (your platform admin enables it). The agent analyzes each alert in plain English: targeted attack vs opportunistic scan, urgency, recommended next steps, and investigation guidance.

Question 10

Can I pay with SEPA Direct Debit?

Accepted Answer

Self-serve Checkout uses cards by default. If you need SEPA Direct Debit, contact us (info@horaseye.com or the Contact page). We enable it manually for vetted organizations to reduce bank-debit fraud.

Question 11

Is HorasEye only for large enterprises?

Accepted Answer

No. We built HorasEye for teams of all sizes, especially organizations with one to three security people who need high-confidence detections without drowning in noise. Self-serve signup, transparent plans, and fast time-to-value are core to the product.

Question 12

Is Free the same as a free trial?

Accepted Answer

No. Free is a permanent plan: sign up yourself, keep 5 honeytokens, no expiry and no card. A free trial is different: start Pro or Team in Checkout with a card on file for 14 days. Cancel before day 14 and you are not charged. When a trial ends without converting, you return to Free and paid alert channels are turned off. Enterprise is sales-only and is not offered as a trial.

Question 13

Can I preview the product before signing up?

Accepted Answer

Yes. Browse the marketing site freely, preview the dashboard layout without signing in, and explore token types on the Create page. Sign up when you are ready to deploy live decoys and receive real alerts. For a full paid-plan evaluation, request a trial.