MeerKat

A motion sensor for your network

Know the moment someone is inside your network.

A MeerKat Sensor is a small plug-in device that poses as the kind of target attackers go looking for. It never scans, never announces itself, and never speaks unless something touches it. When something does, it tells the right person, the right way, at the right time.

Get in touchSee how it works

What it is

The idea in three steps

A MeerKat Sensor plugs into your network and pretends to be something an intruder would want: an unpatched file server, an end of life printer, a security camera with default credentials. Your staff never use it, your software never talks to it, and it never scans or interferes with anything. The only thing that will ever touch it is someone poking around where they should not be.

1

Plug it in

Connect it to power and a network port. It arrives pre-registered to your account with sensible alerts already set. No software to install, no IT project.

2

It waits quietly

It looks like a real device to anyone scanning the network, and it changes what it looks like as attacker trends change.

3

It alerts you

A scan, a probe, a login attempt: the Sensor reports it and the right person gets an email, a text, or a phone call.

The same idea for files. MeerKat Sentries are decoy documents, links, and folders you leave where a snooper would look, a "Passwords" spreadsheet on a shared drive, for example. If anyone opens one, you'll know.

Sentries may require additional configuration on your network.

Why MeerKat

What you cannot get from the alternatives

Live in seconds

Plug into any network segment. No agent, no VM, no IT project. Every Sensor arrives pre-registered with sensible alerts configured.

Curated Personalities

Each Sensor impersonates a file server, printer, camera, or whatever attackers are targeting this week, driven by our curated threat feed or your team's preferences.

Sees the reconnaissance

Pings, probes, port scans, failed logins, and abandoned connections are risk rated Low, Medium, or High and alerted on your terms.

Escalation, not just notification

Route by event context, including severity, time of day, and velocity, across email, SMS, and voice, so the on-call person could get a call, while the rest get email.

Why you need one

The numbers behind the problem

14days
Median time an intruder spends inside before anyone notices, and it went up last year.
Mandiant M-Trends 2026
29min
Average time from first break-in to spreading across the network. The fastest observed: 27 seconds.
CrowdStrike Global Threat Report 2026
1 in 2
Breaches discovered by an outsider, not the company itself. In 1 of 5 cases the attacker announces it.
Mandiant 2026; IBM Cost of a Data Breach 2025
96%
Of ransomware victims are small organizations. 81% of small businesses reported a breach in the past year.
Verizon DBIR 2026; ITRC 2025

Put those together and the pattern is uncomfortable: an intruder is inside and moving within half an hour, the company finds out two weeks later, and half the time a customer, a bank, or the attacker breaks the news.

Prevention is where the money goes. Detection is where the gap is. Security frameworks ask companies to prevent, detect, and recover, and detection is the one most organizations cannot clearly document that they are doing well. The tools that would close the gap are often unpurchased or unused because they are seen as complicated, and most small businesses have nobody whose job it is to watch one.

MeerKat is detection sized for that gap.No skill needed to deploy, nothing to manage unless you want to, and it only speaks when something is wrong.

Compliance

Evidence for the Detect column

Security frameworks now expect you to show that you can detect unauthorized activity on your own network, not just that you tried to prevent it. NIST Cybersecurity Framework 2.0 puts it under its Detect function, continuous monitoring and adverse-event analysis, and the Cyber Risk Institute (CRI) Profile that financial institutions use to satisfy their examiners carries the same expectation.

A MeerKat deployment is a documented, always-on detection control, and its alert and activity logs are the evidence an auditor, examiner, or cyber-insurance questionnaire asks for.

What you get

Two ways to run MeerKat

Both plans are billed annually, include the Sensor hardware, and cost the same every year. Standard suits a small team with any size fleet. Enterprise adds the controls a multi-site or security team needs.

Standard

Small teams, any size fleet

  • Unlimited Sensors and unlimited user logins
  • Risk-rated, opt-in alerting by email, SMS, or webhooks
  • Feed-driven personalities, health monitoring, and SSH session replay
  • 1 virtual Sensor and unlimited document Sentries included
  • Known-hosts whitelist, activity and audit logs, reports, and an API
Enterprise

Multi-site and security teams

  • Everything in Standard, plus
  • Sensor groups and group-scoped rules
  • Schedules, an escalation matrix, and voice alerts
  • User groups with group-based routing
  • Incident management with its own alert chain
  • Custom risk ratings
  • 1 virtual Sensor for every physical Sensor
  • Unlimited URL and QR code Sentries

Every plan includes the Sensor hardware and a USB-C or PoE power option, free shipping on every unit we ever send, one free replacement per year for life, Microsoft 365 single sign-on with MFA, and industry-standard integrations. No per-alert fees, no add-ons, and no surprises. Sensors remain our property so you don't have to worry about the hardware lifecycle.

Sentries

Tripwires beyond the wire

A Sentry is bait that lives in your files rather than on your network. Decoy Word, Excel, and PDF files, folders, QR codes, and URLs that report the moment someone opens them.

Put them where a snooper would look

A file share, a desktop, a folder named Payroll, a spreadsheet named Passwords. Nobody who belongs there has any reason to open one.

They ride the same alert routing

A Sentry hit is an event like any other, risk rated and delivered through the same rules that carry everything else.

They cost you nothing to place

No agent and no change to the file server. Create one in the Portal, put it where you want it, and forget it until it fires.

Some Sentry types may require additional configuration on your network.

Programs

Two things we do that nobody else does

Sharing is caring

Refer a customer and earn credit you can use against your own bill. No cap, no expiration games, and nothing to sign up for.

Protect a Friend

Lend one of your licenses to a friend for 30 days. We ship them a ready-to-go Sensor with a return label. If they sign up, you earn a bonus. If they don't, the Sensor comes back and your license returns to you.

Interested in MeerKat?

Tell us about your network and we'll tell you what a deployment looks like. Questions from IT providers and managed service partners are welcome too.

info@stack42.net