> Most scanners send three requests per IP address. Our solution observes the first two requests to check if a device exists at that IP So all an attacker has

> Most scanners send three requests per IP address. Our solution observes the first two requests to check if a device exists at that IP So all an attacker has to do to avoid the tarpit is reduce their retries to 2? And they can detect all your fake devices by seeing who responds on the 3rd try? I get that this is just one step in the cat-and-mouse game, but the brittleness of this approach makes the grandiose closing statements a little grating: > Lightweight yet powerful, it empowers you to take control of your network security with minimal effort.