Observe
An intruder finds a network that answers like yours. You see every packet they send, from the first one.
Blue Oil
Instead of being watched, you become the observer.
krupiq gives intruders a network that exists only for them. It looks like yours, answers like yours and changes shape before anyone can map it. They spend their effort there. You watch every move. Your data stays where it is.
- Runs on your own machines, as an app or a service.
- Your data never leaves your building.
- GDPR, NIS2, DORA and SEC duties met by design.
Our partners
- SecarmaIndependent security testing
- SUSEHardened operating system
- NVIDIAHardware acceleration
- TechPassportSupplier assurance for banks
Blue Oil
Why you.
What Blue Oil is
Blue Oil is the layer krupiq lays over your network. Like oil on water, it gives an intruder a surface that looks like the real thing and moves like it, while everything underneath stays untouched. Blue is the colour of the defender. The intruder spends their night on a network that exists only for them. You spend yours asleep.
The call comes at 3:40 in the morning. Screens you cannot read. Phones that will not stop. A number with too many zeros. Everyone asks what you did before. No one asks what the tools were called. Some spend that night negotiating. Others sleep through it, because the moment the first file was touched it was already over. By morning, there is nothing to explain.
- 01
Cat
Sees without being seen. Silent, patient, already in position.
Runs on your own machines and sends nothing of yours out. Real sessions are counted, never recorded.
- 02
Squid
Clouds the water and changes shape in an instant. Gone before the predator reacts.
The decoy shifts every five minutes, a little at a time, along a path drawn for your deployment alone. It never reacts to being probed, so probing teaches nothing.
- 03
Owl
Turns its head 270 degrees. Sees everything. Hunts in total darkness.
Every touch on the decoy is real. Nothing legitimate ever goes there, so there are no false alarms.
Safe for production
The decoy runs beside your production network, never in its path. Employees, applications and your own scanners notice nothing. Only the decoy changes.
The platform
Observe. Morph. Prove. Comply.
The four things the platform does, in the order they happen.
01 02 Morph
That network shifts every five minutes along a path of its own. It looks like your network and contains nothing real.
03 Prove
You hold the keys. Every five-minute change carries a proof that it was drawn exactly as published, which you or your auditor can check. We never see your data.
04 Comply
No access to real data means nothing to explain. GDPR, NIS2, DORA and SEC duties are met by how it is built, not by a promise.
How it works
Deploy. Profile. Morph. Prove.
Four steps from nothing to a decoy that an intruder cannot tell from your network.
01 Deploy
Install it on your own machines, as an app or a service.
In practice
- Windows, Linux and macOS
- Runs as a service under its own account
- Nothing of yours leaves your network
02 Profile
The decoy is shaped to look like your network, from a description you control. Raw records never leave.
In practice
- Start from a preset, or describe your own devices
- The description never leaves the machine
- Real sessions are counted, never recorded
03 Morph
The decoy shifts every five minutes, a few steps at a time. It never reacts to being probed.
In practice
- A new position every five minutes
- A path drawn for each deployment, so no two agree
- Probing it teaches nothing: it never reacts
04 Prove
Every change carries a proof that it was drawn exactly as published. You check it yourself. We never saw your data.
In practice
- One proof for every five-minute change
- Checked offline with the krupiq-verify tool
- Signed, reproducible builds. Source available under NDA.
The whole offer
They get a network that is not there. You get the night back.
Your own machines and one annual fee. Nothing of yours exposed, and a proof for every change that you can check yourself.