Synthetic anomaly detection over the live honeypot stream. Compares the last 30 days to the prior same-length window and surfaces UA-lie surges, country share swings, volume spikes, and newly-observed verified vendors. Configure persistent alert rules →
No anomalies in the current window.
The detector compares the last 30d to the 30d before it. Quiet windows mean traffic is steady or honeypot capture volume is low.