Home
Deploy adaptive deception services for infrastructure and AI agent attack surfaces.
Beelzebub is an open-source deception runtime for SSH, HTTP, TCP, TELNET, and MCP. Define realistic decoys in YAML, collect high-fidelity events, and extend the runtime with Go plugins.
Start safely with Docker.Understand the runtime
Follow configuration and events.Build an extension
Add a trusted Go plugin.
Choose Your Path
- Security operators: install, configure, expose, monitor, and safely retire decoys.
- AI security teams: deploy MCP tripwires and LLM-powered interactions to measure agent guardrail bypasses.
- Developers: use the public plugin SDK, add protocols, and keep schemas, validators, tests, and docs aligned.
Documentation Version
These pages track the repository’s main branch, including features that may be newer than the latest tagged release. For a released deployment, select its Git tag and treat the schemas checked into that tag as the compatibility boundary.
Beyond Beelzebub Runtime
The open-source runtime remains the foundation. You can deploy, extend, and operate it independently. Beelzebub Platform is the managed path for teams that need to coordinate deception across environments and connect runtime evidence to a broader security workflow.
Explore Beelzebub Platform