I built Deception Mesh: an open-source Rust MVP for defensive cybersecurity telemetry

Description and use

Deception Mesh is a lightweight Rust MVP that deploys decoy HTTP and SSH services to capture suspicious activity and expose structured telemetry via API, CSV, and webhooks.

Problem

Small projects often add security only after incidents; there is a need for lightweight decoy services that can capture suspicious activity without building large platforms.

Outcome

Demonstrated that a small, auditable deception layer can be built in Rust, providing structured telemetry for suspicious interactions without large platforms.

Workflow

• Deploy Deception Mesh via Docker
• Configure decoy sensors (HTTP/SSH)
• Interact with decoy services (e.g., send HTTP requests or SSH attempts)
• Sensors capture events
• Events stored and exposed as telemetry
• Operator reviews telemetry through logs, CSV export, API, or webhook

Evidence

I just published Deception Mesh, an open‑source cybersecurity MVP built in Rust.

Source

Instead of exposing only real services, the project uses lightweight decoy sensors that can capture suspicious HTTP and SSH activity and turn it into structured telemetry.

Source

The MVP includes: HTTP decoy sensor, SSH decoy sensor, REST API, JWT authentication, Role-based access control, Webhook notifications, CSV export, Docker deployment, Documentation for local execution and testing

Source

It is an MVP. It still needs more hardening, better testing, stronger deployment guidance and deeper validation before being treated as production‑ready.

Source