Xello Deception Platform
Xello helps organizations identify intruders who have bypassed perimeter defenses. It is designed for businesses in the financial, industrial, government, and telecom sectors.
At a glance
- Category
- Security
- Best for
- Financial institutions, Industrial operators, Government agencies, Telecom providers, Enterprise companies
- Pricing
- Pricing was not clearly available from the provided evidence. Buyers should confirm current pricing on the vendor website. A trial period typically lasts about one month.
- Key use cases
- APT Attack Detection, SOC Noise Reduction, Forensics Gathering, Protecting Critical Assets
- Integrations
- SIEM, Active Directory, DNS
- Official website
- xello.net
Xello is a security platform designed to identify targeted Advanced Persistent Threat (APT) attacks. It works by deploying a layer of decoys—such as false user accounts, servers, and databases—across a corporate network to lure attackers away from sensitive data.
The software is intended for organizations in sectors such as finance, government, and industrial operations. It is designed to function after traditional security tools, like firewalls or antivirus, have been bypassed.
Buyers should note that implementation requires two virtual machines running Windows Server 2016 or later. The platform focuses on detection and forensics collection.
Because decoys are generated based on the specific assets of a customer's network, the setup process involves an analysis phase to create traps that mimic existing network assets.
Key Features
Uses patented Dexem technology to create decoys and traps that mimic existing network assets.
Provides alerts when an attacker interacts with a decoy or trap.
Supports the analysis of intruder behavior and objectives through automated processing.
Collects data on attacker activities to support incident response.
Designed to integrate with SIEM systems to help automate the blocking of intruders.
Distributes decoys and collects forensics in an agentless manner.
Use Cases
Identifying targeted attacks that have penetrated the network perimeter.
Using decoy interactions as indicators of a threat to help reduce false positives.
Collecting evidence on attacker tactics and tools through the use of trap servers.
Directing attackers away from real databases and servers toward a simulated network layer.
Best For
Integrations
Pricing
Pricing was not clearly available from the provided evidence. Buyers should confirm current pricing on the vendor website. A trial period typically lasts about one month.
FAQ
Implementation typically takes between one week and one month. It requires two virtual machines running Windows Server 2016 or later.
No, the platform uses an agentless distribution method to place traps and maintain communication with the management server.
The company typically offers a trial period for a pilot project that lasts about one month.
Source category: Security
Source subcategory: Cybersecurity
