# Lilytrap

> Lilytrap plants decoy code, credentials and agent "handoff" notes in build output via a GitHub Action, and alerts the owner (and their coding agent) when anyone uses a decoy. It runs inside the customer's CI and never receives their source code.

## Setup

- [setup.md](https://lilytrap.com/setup.md): complete, agent-executable setup instructions and API reference. An agent can do the entire setup without a human, apart from one optional token for the GitHub hand-off.

## Product

- [Home](https://lilytrap.com/): what Lilytrap does, how it works, privacy and pricing.
- [Respond](https://lilytrap.com/respond.html): blocking attacker IPs at the edge. AWS WAF push, a block-list feed for Palo Alto, FortiGate, Cloudflare and other firewalls, and event export to Splunk and Microsoft Sentinel. Agent steps are in setup.md section 4b.