Why we opened it up

Teams kept asking how Feint decides what to try next. Decoy is the harness we use to develop those strategies, and it is now available on GitHub.

What it does

Give it a staging URL and a goal. Decoy maps the routes, plans a multi-step campaign and logs every request, so you can read exactly how it reasoned.

What it does not do

It will not run against a host you have not verified, and it does not open pull requests. That part stays in the product.

Get started

Clone the repo, add a target to the config and start a run. Your first campaign takes about ten minutes.