# Tracebit

> Tracebit is a London-based cybersecurity company that builds cloud-native deception technology. It automatically deploys realistic decoy resources - called canaries - across a customer's cloud accounts, CI/CD pipelines, identity providers and developer workstations. Because the decoys hold no real data, any interaction with them is a high-fidelity signal that an attacker is already inside. Founded in 2023 by ex-Tessian engineers Andy Smith and Sam Cox, Tracebit aims to cut the time it takes an organisation to detect a breach from months to minutes, and has deployed millions of canaries protecting customers such as Docker, Snyk, Riot Games and Synthesia.

- **Founded:** 2023
- **Headquarters:** London, United Kingdom
- **Founders:** Andy Smith (Co-Founder & CEO), Sam Cox (Co-Founder & CTO)
- **Team size:** ~40 employees
- **Products:** Cloud-Native Canaries, Credentials & Artifacts, Perimeter Canaries, Deceptive Artefacts, Community Edition
- **Notable:** Raised $25M total across seed and Series A within roughly three years of founding., Deployed over 2 million canaries protecting 750+ cloud accounts., Won marquee customers including Docker, Snyk, Riot Games and Synthesia.

## Products & services

- **Cloud-Native Canaries** — Tailored decoy resources - buckets, secrets, credentials and identities - deployed across AWS, Azure and Google Cloud using native APIs. They hold no real data, so any interaction is a high-fidelity signal of compromise.
- **Credentials & Artifacts** — Canary credentials, tokens and files - AWS session tokens, SSH keys, browser session cookies, password-manager entries and email trackers - planted where attackers look during lateral movement and credential access.
- **Perimeter Canaries** — Edge-deployed decoys that extend deception to SaaS and cloud perimeter surfaces, catching attackers earlier in the kill chain.
- **Deceptive Artefacts** — Decoy artifacts embedded across infrastructure and workflows to broaden coverage beyond credentials.
- **Community Edition** — A free tier opening Tracebit's canary detection to individual developers and small teams, including AWS tokens, SSH keys, browser cookies and LLM canaries.
- **LLM / AI Agent Canaries** — Canaries planted inside AI-related workflows to detect attackers abusing autonomous agents and their credentials.

## Achievements

- Raised $25M total across seed and Series A within roughly three years of founding.
- Deployed over 2 million canaries protecting 750+ cloud accounts.
- Won marquee customers including Docker, Snyk, Riot Games and Synthesia.
- Launched a free Community Edition to broaden access to security canaries.
- Achieved SOC 2 Type 2 and AWS Qualified Software status.

## Latest updates

- **2026-03** — Raised $20M Series A led by FirstMark; announced Perimeter Canaries, Deceptive Artefacts and Google Cloud support, and plans to expand in the US.
- **2025-12** — Launched Community Edition, a free tier bringing security canaries to developers and small teams, plus an agent skill for end-to-end canary setup.
- **2024-07** — Raised $5M seed round led by Accel to accelerate mass adoption of threat deception.

## Links

- Website: https://tracebit.com
- LinkedIn: https://www.linkedin.com/company/tracebit
- Twitter/X: https://twitter.com/tracebit_com
- GitHub: https://github.com/tracebit-com

---

Profile page: https://yespress.io/tracebit
Published by YesPress — https://yespress.io
Last updated: 2026-07-17