Hold the interaction.
“Sticky” means keeping suspicious actors engaged long enough to reveal additional behavior, tactics, and intent.
About stickysweet
The attack surface
has become human.
Attackers no longer need to begin with an exposed server. They can begin with a name, a job title, an email address, a phone number, or an AI agent.
A new deception layer
Security deception needs a human layer.
Traditional honeypots remain valuable. They give defenders controlled technical infrastructure designed to attract, observe, and understand malicious activity.
stickysweet extends that same deception concept toward synthetic people and digital identities—the targets adversaries now discover, profile, and approach.
The internet already contains billions of identities.
- 01Attackers search them.
- 02Agents enumerate them.
- 03Scammers message them.
- 04Helpdesk impersonators call them.
- 05Phishing campaigns target them.
What if some of those people were built to be found?
The name
Why stickysweet?
The idea is simple: a convincing synthetic target should be attractive enough to approach—and useful enough to keep a suspicious actor engaged.
Earn the approach.
“Sweet” is the attractive synthetic target: credible, discoverable, and relevant to the adversary looking for a way in.
The shift
Honeypots for the agentic era.
Agentic systems change the scale and tempo of identity-based attacks.
Adversaries
Attackers can scale identity discovery, profiling, and engagement across channels.
Defenders
Defenders need controlled synthetic identities and a governed path from observed contact to adversary interaction intelligence.
Synthetic people.
Real adversaries.
A safer target