CalasAUTOMATIONS
WatchpostBY CALAS AUTOMATIONS
Intrusion decoys for small business · Winnipeg

A silent alarm on the doors nobody's supposed to use.

We put fake doors in your business — a fake login, a fake admin panel, a fake database. Real staff and real customers never touch them, because there's no reason to. So when someone does, you get an alert (text or phone push, set up with you), and every month a one-page report you can hand to your accountant or your insurer.

Start with a free month Watch the demo
Watch C$79/moFirst month freeDetection and reporting onlyNo 24/7 monitoringWe never hack back
Your decoysSample · not a real client
  • Fake login pageQuiet
  • Fake admin panelTouched
  • Fake databaseQuiet
Real staff have no reason to open these. That's the whole idea.

Watchpost, plainly

What it does, what it does not do, what it costs, and how to start.

What it does

  • Dan sets up your decoy and your alert channel (text or phone push) with you.
  • Alerts you when someone touches a decoy.
  • Sends a one-page monthly report, checked by a person.

What it does not do

  • No 24/7 monitoring or on-call.
  • No antivirus, no blocking, no clean-up. It is the alarm, not the locks.
  • Never hacks back. A quiet month means nothing touched the decoys, not that you are secure.

Price

C$79 a month for one location, or C$790 a year. First month free. If you tell us a month's decoys were not up, we check by hand and refund that month. Cancel any time.

How to start

Early access, set up by hand. Start the free month and Dan gets in touch to set it up.

Start with a free month

01 The idea

Three tripwires, one alarm.

Each piece is a decoy with no real purpose, so anything that touches it is a warning worth hearing.

01

The decoys

A fake "easy target": a phony login, an open-looking admin panel, a database that answers. One lives on a small box we run; where it makes sense, one sits inside your own office network. That inside one matters most.

02

The alert

When something serious touches a decoy, an alert goes to the channel we set up with you (text or phone push): who, what they tried, how bad.

03

The report

Once a month, one page in plain English: who came knocking, what they were after, what to do about it, and what we don't see. A quiet month says "nothing touched these doors", never "you're secure".

02 How it works

Set once. Then it listens.

No jargon, no babysitting. Nothing changes on your real computers.

1

We set the traps with you

Dan sets up a decoy with your business's name on it, and where it fits, one decoy inside your network. Early access, set up by hand. Nothing changes on your real computers.

2

You get told

Serious hits are sent to your phone through the channel we set up with you (text or phone push).

3

You get the page

Every month, a one-page PDF with the bottom line first: "all quiet" or "2 things to do this week", then the details.

03 The monthly page

One page. Bottom line first.

Sample report. This is the real report layout with made-up numbers for a made-up business, not a mock-up of features we haven't built.

Watchpost security report · samplePrepared for Sample Co. (fictional) · last 30 days · sample numbers

Bottom line: 2 things to do this week.

3 outside addresses tried the decoys, 41 attempts in total. One of them hunted for password and configuration files, which is the serious kind.

3outside addresses
41attempts recorded
Criticalworst severity
1,440proof the decoys were answering

What we recommend: 1. Confirm no real web server exposes .env or backup files. 2. Turn on two-factor login for the admin account. 3. Nothing else; keep the decoys running.

  1. Plain EnglishWritten so you can hand it to your accountant or your insurer.
  2. What to do, not just what happenedEach month ends with the short list of things worth doing.
  3. Whether the alarm was onThe report says whether the decoys were up. In early access we check that by hand.

04 Plans

One plan. One alarm.

First month free, no setup fee for founding clients, cancel any time. Save about 2 months if you pay for the year. Prices in Canadian dollars.

First month free

Watchpost

One-location business. Alerts go to your phone through the channel we set up with you; you read the report yourself every month.

C$79/ month CAD · first month free
or C$790/year — save 17% (about 2 months free)
  • Decoy set up for you in your name, by hand with Dan; one inside your network where it fits
  • Dan sets up your decoy and your alert channel (text or phone push) with you
  • Monthly one-page PDF, checked by a person before it's sent
  • Questions answered by Cara, our assistant, at 431-244-9026 (business hours, Winnipeg time)
  • Not included: no 24/7 monitoring or on-call, no antivirus or endpoint protection, no blocking or clean-up. It's the alarm, not the locks.
Start Watchpost

First month free. After 30 days your card is charged C$79 plus tax, then monthly until you cancel. Cancel before day 30 and you pay nothing.

IT shops and MSPs

Want Watchpost for your clients, with your name on the report? Call Cara and we’ll set it up per site.

Call Cara

First month free. After that, if you tell us a month's decoys weren't up, we'll check by hand and refund that month.

Cancel any time. Nobody can guarantee "no break-in", and we won't pretend to.

Looking out for family instead of a business? Calas ScamCatch Family (C$9.99/month) gives an aging parent a scam checker on their phone and gives you a heads-up when it matters.

05 Said plainly

What we won't pretend.

Early access

Watchpost is in early access with no marketing push. We're taking on a small number of businesses so we can learn from real decoys at real clients before we say anything louder than this page.

How we compare, honestly

Checked 2026-09-21 against the vendors' own pages: Thinkst Canary does decoys better than we do and costs several times more at its published price; Huntress, Todyl, Guardz and Defendify sell 24/7 detection and response with endpoint software, which we don't; Microsoft Defender for Business (CAD $4.10/user/month) protects your computers, which we don't. Watchpost is the alarm on the fake doors, at a price a one-location business can approve without a meeting. Keep your antivirus.

What Watchpost is, and isn't

It's detection, not a lock. It tells you fast when someone's poking at doors they shouldn't, so you can act. It doesn't by itself stop a determined attacker, it doesn't replace passwords, updates, backups and a firewall, and no service on earth makes a business unhackable. It only watches decoys we placed, reports what it sees, and never touches or strikes back at anyone. Ask and we'll show you exactly how the decoys work; there's nothing hidden in them.

06 Questions

Questions people ask.

I've got nothing worth stealing.

Your card terminal, your staff's logins, your bank connection, and your reputation on Google when customers find out. Attackers don't pick targets; their scripts try every address on the internet. The report shows you how many tried yours.

My IT guy or MSP already handles security.

Keep them. This gives them one thing they usually don't have: a tripwire that only rings when something is actually wrong. We'll send them the report too, or they can run it for you (call us about per-site pricing).

Isn't this just antivirus?

No. Antivirus watches your computers for bad files. This watches for someone hunting for doors. They're different jobs, and most businesses have the first and not the second.

Has it caught anything?

On our own box it caught internet scanners within hours, which is normal for anything online. We'll always tell you the truth about what it has and hasn't seen at real clients; that's the whole point of the report.

Is someone watching my alerts around the clock?

No, and we won't pretend otherwise. Alerts go to your phone through the channel we set up with you. A person checks your monthly report, and Cara answers questions at 431-244-9026. If you need a team on call 24/7, that's a managed detection and response provider.

What do you do with the data?

We keep the decoy logs (address, time, what was sent, cleaned to plain text) to build your report. We never scan, contact or "hack back" the addresses we see, and we never put anything on your real computers.

Put the fake doors up. The first month is on us.

Watchpost, C$79/mo after the free month. Cancel any time.

See the plans