Proofpoint Shadow

Proofpoint Shadow, formerly Illusive Shadow (acquired in 2022), is an agentless, undetectable deception technology that creates a hostile environment for attackers, stopping lateral movement and access to critical assets.

Shadow Features & Benefits

75+ Deception Techniques

Utilize active deception techniques to imitate credentials, connections, data, systems, and other artifacts that appear useful to the attacker. Ensure early attacker detection— both insiders and external attackers—no matter where compromise begins.

Agentless Detection and Protection

Illusive’s unique agentless approach is built on intelligent automation, it is designed to have a light operational footprint to minimize the impact on IT and can’t be disabled or circumvented by attackers like other agent-based solutions.

A View from the Attacker’s Perspective

The Illusive Shadow™ management console shows how close attackers are to critical assets, a full timeline of attacker activity once deceptions are engaged, full visibility into how attackers perceive the deceptive data, and much more intelligence on attacker activity.

Automated Deception Customized to Each Endpoint

An intelligent automation system enables an authentic deception environment that scales and adapts over time with very little human effort. Illusive Shadow™ analyzes the endpoint landscape, designs tailored deceptions for each machine, deploys them through a one-click process, and manages the ongoing process of adjusting and managing deceptions over time.

Trap Server to Detour Ransomware and Other Threats

The Illusive Trap Server invisibly interacts with attackers, moving them away from real data and critical assets and towards a completely imaginary attack surface.

Deceptive Microsoft Office Beacon Files

Organizations can automate the creation and customization of hundreds of thousands of deceptive Word and Excel documents that are indistinguishable from the genuine article, right down to the usage of company logos and letterhead. These fake but seemingly real Office documents can be loaded with fake data that sets off an alert as soon as an attacker tries to use the information to gain access.

FirstMove Services

Proofpoint provides services to fill staffing gaps as needed, from assistance planning deployments to development of special use cases and interpretation of alerts.