of attackers were on no public blocklist (1,102 of 2,207).
From managed detection to managed deception
Know the attacker before he knows you
JODOR builds deception systems in your name, hosted in Saudi Arabia, and AI agents watch everyone who touches them. You receive your own list of the attackers who target you. You install nothing.
Last reviewed:
Why now
Public lists are not enough
JODOR sensors and deception systems in Saudi Arabia recorded 2,207 attackers in 56 days. This is what they showed:
of attackers hosted in Saudi Arabia were on no list (194 of 220).
of attackers with a known exploit used it within 10 seconds of arriving (146 of 173).
Source: JODOR sensors and deception systems in Saudi Arabia, 56 days (JODOR analysis).
What it is
Deception in your name, intelligence about your attackers
Deception means fake systems that look easy to break into: a staff login page, an API or a "forgotten" configuration file. No genuine user has a reason to go there, so anyone who touches them is almost certainly an attacker.
We profile who targets you
We build a threat profile for your sector and services in a one-hour workshop.
We design deception systems in your name
Fake systems with your name and look, on domains JODOR owns, with your written approval, hosted in Saudi Arabia.
We set the bait
Fake weaknesses and fake passwords only. Nothing real is ever placed in a deception system.
AI agents watch, with a human in the loop
Around the clock, they record each attacker, match it against threat lists and classify it. A JODOR analyst reviews what they escalate.
We deliver the intelligence
Your own attacker list, priority alerts, detection rules for your tools and a monthly report. You decide what to block.
What you receive
Intelligence you can use from day one
Your own attacker list
Addresses, fingerprints and indicators your firewall or SOC can load.
Priority alerts
If someone tries a fake password that exists only in your deception systems, you know at once that you are being targeted.
Detection rules
Rules written from what attackers actually did, ready for your tools.
Monthly report and briefing
Who targeted you, how, from where, and what to do.
No effort on your side
Nothing to install, no access to your network
| You do | You do not |
|---|---|
| Sign the subscription and authorise the use of your name | Install any software or agent |
| Approve the deception system names once | Give us access to your systems or logs |
| Choose where the list and reports arrive | Change anything in your environment for us |
Reports and articles
See the evidence for yourself
Every figure on this page comes from JODOR sensors and deception systems, and from a live test of JODOR's AI agents. Each report comes as a PDF summary, with an article that explains it in full.
Threat Horizons 2026–2027
What we saw in 2026 in the Kingdom and worldwide, and five things we expect in 2027.
From Managed Detection to Managed Deception
For decision makers: why public lists miss half of attackers, and how you receive a list of your own.
Machine-Speed Attack TTPs
For SOC, CTI and defence teams: techniques, CVEs, ATT&CK mapping and YARA rules.
Inside JODR aMDR
How the sensors, deception systems and AI agents work, in numbers.
The video (60 seconds)
The video (60 seconds)
Attacks don't wait. See how JODOR works.
JODOR perspective
Watch the video
Attacks don't wait. See how JODOR works.
In ArabicQuestions
Questions we often hear
Do you monitor our network?
No. We watch JODOR's deception systems only, on JODOR infrastructure in Saudi Arabia. We never touch your network or logs.
Could a real customer land on a deception system by mistake?
Deception systems are never advertised, linked or listed by search engines, so only someone hunting for weaknesses reaches them.
Where is the data kept?
Inside Saudi Arabia.
Do you block attackers for us?
We give you the intelligence and the recommendation; you decide and apply it in your environment. If you want help applying it, JODOR's services team is ready.
From managed detection to managed deception
Start with one step
45 minutes: a briefing on what now attacks organisations like yours. 30 days: a pilot with deception systems in your name that ends in a board-ready read-out.