Synthetic anomaly detection over the live honeypot stream. Compares the last 1 day to the prior same-length window and surfaces UA-lie surges, country share swings, volume spikes, and newly-observed verified vendors. Configure persistent alert rules →
No anomalies in the current window.
The detector compares the last 1d to the 1d before it. Quiet windows mean traffic is steady or honeypot capture volume is low.