BlackSea is an active honeypot for autonomous AI attackers with a unique, NO-prompt-injection technique. It detects, profiles, and drowns an operation before it reaches real assets. In the Hugging Face incident, a BlackSea lure in the agent’s path could have exposed and stopped the attack before it reached the production database.

Across 10 autonomous pentest systems, six frontier models, and three lures, the agents ran our payload in 97.8% of runs.