01 / Discovery
A familiar office resource.
Someone finds a file share, internal portal or database represented by a realistic Decoy in your selected environment.
Tero for small businesses
Small team.
A clearer signal.
Tero deploys realistic Decoys around the file shares, portals and internal services your business relies on. Spot suspicious access and give your IT team the evidence to investigate.
Practical cybersecurity detection for the environment you already run.
01
Start with a focused scope.Choose services that matter to your business.
02
Reveal suspicious exploration.Watch interactions with realistic Decoys.
03
Give your team a clear lead.Keep the request, outcome and context together.
Make an interaction worth investigating
They explore your services.
Your Decoys tell the story.
A finance share or staff portal can look like a useful resource to an intruder. A Decoy gives your team a record of what was requested and what happened.
02 / Interaction
A request leaves a record.
Synthetic content gives the resource a believable purpose. Supported operations record the interaction and observed response.
03 / Investigation
Your team has somewhere to start.
Review the observed source, affected service and sequence together, with the evidence linked to your deployment.
Around the workflows you recognise
Watch the services
your business runs on.
Start with a few relevant Decoys in an approved environment. Represent everyday business resources with synthetic content.
FINANCE & SHARED DOCUMENTS
“What files are here?”
Represent finance folders, shared documents and internal file services. See browsing, access attempts and the outcomes supported by the selected capability.
Finance sharesSMB file servicesSynthetic documents
Reveal interest in business documents.
STAFF & SUPPLIER WORKFLOWS
“What can I access?”
Make staff workspaces, supplier exchanges and support portals look relevant. Follow the requests that interact with these synthetic business services.
Staff workspaceSupplier exchangeIT support
Watch exploration of internal portals.
BUSINESS DATABASES & IT SERVICES
“What else can I reach?”
Represent selected reporting databases and access services. Review supported authentication, discovery and operation-level evidence in one investigation.
PostgreSQLMySQLSSH access
Capture service and database exploration.
Choose capabilities offered by your verified Sensor release. Keep Decoy content synthetic and confirm the host and network requirements before deployment.
A clear lead for your IT team
A finance share was explored.
See what was attempted.
Tero connects the recorded activity with the Decoy and environment involved. Your team can review the sequence before deciding what needs further investigation.
- The target: which file-service Decoy was accessed.
- The activity: browsing and an attempted file operation.
- The outcome: what the Decoy returned and what it denied.
CASE EXAMPLE / FINANCE FILE SHARENeeds review
Finance file share
— unusual folder browsing
Recorded activity against a Decoy with synthetic business files.
- Environment
- Main office
- Decoy
- Finance file share
- Observed source
- 10.20.1.44
File-share connection
SucceededFinance share accessedDirectory listing requested
Response sentfinance / invoicesFile rename attempted
DeniedSynthetic invoice documentThe request and outcome stay together.
Human identity, malware involvement and production impact remain unconfirmed.
Start with a practical deployment
One approved host.
A few relevant Decoys.
A clear evidence check.
Start with a Sensor on a supported host in the office, on-premises or supported cloud environment you want to monitor. Choose Decoy services that make sense for your business.
01Choose your starting point
Agree an approved environment, host and network scope with your IT team.
02Deploy relevant Decoys
Represent a file share, portal or database using synthetic business content.
03Verify the evidence path
Test from a separate client and confirm readiness, source attribution and investigations.
Approved office or business-support network
Existing business servicesYour everyday applications and shared resources
Tero Sensor hostRealistic Decoys with synthetic content
Finance shareStaff portalReporting database
Selected clients interact with the Decoy endpoints
Required outbound connectivity
Tero consoleDeployment visibility & recorded investigations
Visibility depends on which Decoys are deployed and reachable. Review separate networks and locations individually.
Before you deploy
Practical answers
for your business.
What is a sensible starting point?
Choose one approved environment and a few supported Decoys that represent useful business services. Agree who reviews the activity, then verify the full evidence path with a controlled test.
Does Tero need real company documents?
No. Use synthetic records and documents in Decoys. Do not copy real invoices, employee information, customer records or production credentials into them.
Can we use Tero in our office or on premises?
Choose an office, on-premises or supported cloud deployment using a platform and verified release available to your account. Confirm the host, runtime and network requirements before installing.
Who should review the investigations?
Agree ownership with your IT team or approved IT partner before the pilot. Decide who receives alerts, reviews the recorded evidence and coordinates any follow-up response.
Focused detection for your business
Give your team a clearer lead
when someone explores your services.
Tell us about your office and the workflows you want to monitor. We’ll help you plan a practical starting point for Tero.
Plan your deploymentStart with a defined scope. Verify the evidence.