trappsec is an open-source framework that embeds decoy routes and honey fields in your application code, detecting API reconnaissance and privilege escalation attempts before the perimeter is crossed.