ReCover
IT Heterogeneity for Production Traffic — Coming Soon
ReCover is Curtail's next-generation production traffic tool, currently in development. Built on NCAST, it monitors live traffic in real time and can divert attacker sessions to honeypots — creating the kind of software heterogeneity that Alex Stamos calls "the infosec budget-buster you never wanted but soon will need."
Features
Attacker Session Hijacking
Detect malicious sessions in real time and silently redirect them to honeypots. Attackers think they're in your system — but they're in a sandbox you control.
Software Heterogeneity
Build parallel traffic paths so no single point of failure can take you down. ReCover creates the IT heterogeneity that critical infrastructure demands — separate systems, separate attack surfaces.
Live Traffic Analysis
NCAST compares production traffic against known-good baselines in real time, identifying behavioral anomalies the moment they appear — whether from bad deployments or active attacks.
Automatic Traffic Diversion
When anomalies are detected, ReCover redirects traffic to healthy instances or honeypots without user impact. No manual intervention, no downtime.
Use Cases
Honeypot Deception
Redirect attacker traffic to decoy environments that look real, wasting their time and collecting intelligence while your production systems stay safe.
Cyber Resilience
Build the parallel infrastructure that Alex Stamos urges — so the next CrowdStrike-scale event doesn't ground your fleet or freeze your operations.
Supply Chain Protection
Monitor third-party updates against live traffic and divert if a compromised dependency starts behaving differently than expected.
Zero-Day Containment
Detect exploitation attempts in real time and isolate attacker sessions before they can move laterally through your infrastructure.