Observed arrival · 2026-10-26
RipTidio’s AI-attacker decoys
RipTidio presents a security product that uses decoy services and credentials to detect and respond to AI-assisted intrusions.
- For
- Security teams investigating AI-assisted intrusions
- Worth noticing
- Its Ollama and vLLM decoys are described as running no model while recording prompts.
Field notes
The homepage names several decoy types, including an internal-looking MCP server, model-server endpoints, and a company site with an API and secrets endpoint. Its agent-registration flow asks visitors to identify their model, harness, tools, and objective, while explicitly treating those answers as self-reported. The page also describes using distinct agent-guidance paths to see which file was fetched. These are presented as product capabilities, not independently verified results.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue