Do you really run voice cloning and deepfake simulations?

Yes, and only under signed authorisation with an agreed target list, consent controls, an emergency stop contact and a full audit trail. Scenarios are designed to teach rather than humiliate, and every simulated call is debriefed. If your leadership is not comfortable authorising it, we will say so and scope around it.

Will you tell us who failed?

No. Individual results go to the individual, along with the coaching. Leadership sees aggregates, trends and department-level risk. Programs that name and shame reliably produce the same outcome - people stop reporting - and concealment is what turns a two-minute incident into a two-week one.

We are small. Is this only for large enterprises?

No. Small organisations are targeted heavily precisely because they have no security function. Engagements start at a single workshop or a one-off exposure assessment, and we deliberately keep an entry tier that a twenty-person company can afford. If you have genuinely no budget and serve a community, ask about our free monthly sessions.

How do we start, and what does it cost?

Start with a free thirty-minute call. We talk through where you stand, what a program would look like, and whether it is worth doing - no pitch deck, no assumed findings before we have even spoken. Pricing depends entirely on headcount, scope and channels, and we will only propose work if that conversation turns up something worth doing.

AwareXone

Social Engineering & Training
The people attackers actually call
Offensive Security
One attack path, seven ways in
Cybersecurity Services
Everything behind the person who was called
Account & Executive Recovery
When it is already personal
Projects
Free, permissively licensed, on GitHub
Agentic Bug HunterBug bounty toolkit, with or without a subscription.Public Skills BuilderAgent skill files from public disclosures.Web3 Bounty SkillsSmart contract review, eighteen skill files.
The program
Browse everything, or send a patch
Research
Field write-ups and where we speak
How we operate
Scope, guardrails and what to expect
Engagement shapes
How you buy, not what you buy

Book a call

Social Engineering & Training

Offensive Security

Cybersecurity Services

Account & Executive Recovery

Projects

Agentic Bug Hunter Public Skills Builder Web3 Bounty Skills

The program

Research

How we operate

Engagement shapes

GitHub

Legal

Privacy Policy

Last updated 2026

This policy covers awarexone.com and the enquiry forms on it. Personal data handled inside a client engagement is governed by that engagement's contract and data processing agreement, not by this page.

01What we collect from this website

Only what you type into a form. There are no advertising trackers, no third-party analytics scripts and no behavioural profiling on this site.

Engagement enquiries: name, work email, organisation, role, phone if supplied, approximate team size, area of interest and your message.
Newsletter subscriptions: email address only.
Server logs held by our hosting provider: IP address, user agent and requested path, retained briefly for abuse prevention and availability.

02Why we hold it

Enquiry data is used to reply to you, prepare for the call you asked for, and keep a record of the commercial conversation. Newsletter data is used to send the newsletter. That is the entire purpose list.

We do not sell data, share it with advertising networks, or add enquirers to a marketing list without an explicit request.

03How long we keep it

Enquiries that do not become engagements are deleted within twenty-four months. Newsletter records are kept until you unsubscribe, after which we retain only a suppression record so we do not accidentally contact you again.

Engagement records are retained per the retention period agreed in the relevant contract.

04Processors we use

Form submissions are stored in a managed Postgres database provided by Supabase. Email is handled by a standard business email provider. The site is served from a commercial hosting platform. Each of these processes data only on our instructions.

05Engagement data and confidentiality

Findings, simulation results and any client material gathered during an engagement are treated as confidential by default, encrypted at rest, restricted to the named engagement team, and destroyed or returned at the end of the agreed retention period.

Simulation results identifying individual employees are shared with that individual and with the named client contact only. We do not publish, resell or reuse client data for research without written permission and full anonymisation.

06Your rights

You can request access to, correction of, or deletion of your personal data, object to processing, or ask for a copy in a portable format. Email awarexone@gmail.com and we will respond within thirty days.

If you are in a jurisdiction with a supervisory authority for data protection, you have the right to complain to it.

07Children

This site is aimed at organisations and is not directed at children. We do not knowingly collect personal data from anyone under sixteen.

08Contact

Privacy questions, requests and complaints: awarexone@gmail.com.