Do you really run voice cloning and deepfake simulations?

Yes, and only under signed authorisation with an agreed target list, consent controls, an emergency stop contact and a full audit trail. Scenarios are designed to teach rather than humiliate, and every simulated call is debriefed. If your leadership is not comfortable authorising it, we will say so and scope around it.

Will you tell us who failed?

No. Individual results go to the individual, along with the coaching. Leadership sees aggregates, trends and department-level risk. Programs that name and shame reliably produce the same outcome - people stop reporting - and concealment is what turns a two-minute incident into a two-week one.

We are small. Is this only for large enterprises?

No. Small organisations are targeted heavily precisely because they have no security function. Engagements start at a single workshop or a one-off exposure assessment, and we deliberately keep an entry tier that a twenty-person company can afford. If you have genuinely no budget and serve a community, ask about our free monthly sessions.

How do we start, and what does it cost?

Start with a free thirty-minute call. We talk through where you stand, what a program would look like, and whether it is worth doing - no pitch deck, no assumed findings before we have even spoken. Pricing depends entirely on headcount, scope and channels, and we will only propose work if that conversation turns up something worth doing.

AwareXone

Social Engineering & Training
The people attackers actually call
Offensive Security
One attack path, seven ways in
Cybersecurity Services
Everything behind the person who was called
Account & Executive Recovery
When it is already personal
Projects
Free, permissively licensed, on GitHub
Agentic Bug HunterBug bounty toolkit, with or without a subscription.Public Skills BuilderAgent skill files from public disclosures.Web3 Bounty SkillsSmart contract review, eighteen skill files.
The program
Browse everything, or send a patch
Research
Field write-ups and where we speak
How we operate
Scope, guardrails and what to expect
Engagement shapes
How you buy, not what you buy

Book a call

Social Engineering & Training

Offensive Security

Cybersecurity Services

Account & Executive Recovery

Projects

Agentic Bug Hunter Public Skills Builder Web3 Bounty Skills

The program

Research

How we operate

Engagement shapes

GitHub

Pricing

What this costs, and what decides it

Three shapes an engagement can take, and the free call that turns one into a number. No pricing table, because we do not have one that would be true.

Book a free call

The three shapes

How you buy, not what you buy

No price below - that takes a scoping call. What's here is the shape of the commitment: one engagement, a rolling program, or someone on call.

Baseline

Fixed scope, fixed fee

One engagement, agreed in writing up front, that tells you where you actually stand before you commit to anything longer.

OSINT baseline across your organisation's public attack surface
Sampled vishing, phishing and SMiShing runs across representative teams
Cross-vector comparison: where the pattern holds and where it breaks
Prioritised list of which vector to address first, and why
Executive summary written for a board, not just a security team
A clear scope and estimate for any program that follows

Right forA first engagement, one specific worry, or a board that wants evidence before budget.

Talk to us about a baseline

02Most common

Program

Per head, annual

The Human Firewall Program: a rolling cycle of simulation, coaching and measurement rather than an annual module.

Role- and privilege-weighted simulation calendar
Just-in-time coaching triggered by failure, not annual slide decks
Manipulation-resistance workshops for finance, HR, IT support and leadership
Human risk score with department, role and trend breakdowns
Quarterly board pack mapped to your compliance framework
Prioritised, actioned threat findings rather than a raw feed

Right forContinuous exposure, a compliance cadence to feed, or behaviour that has to actually move.

Talk to us about a program

Retainer

Monthly retainer

Someone already engaged, already briefed on your environment, and contractually obliged to pick up when the call is happening right now.

Retained response with agreed engagement times
Urgent verification line for suspected deepfake or cloned voice contact
Out-of-band verification protocol designed and rolled out
Business email compromise triage and containment
Payment recall coordination and evidence preservation
Post-incident review and pretext-specific retraining

Right forNamed executives, payment authority, or a team that cannot afford to be negotiating a rate mid-incident.

Talk to us about a retainer

Every offensive engagement, at any of these shapes, runs against a written authorisation and an agreed scope, with an emergency stop contact and no individual named in a report. That does not change with the size of the fee.

Ready when you are

Start with a free call.

Thirty minutes. You leave with a scope worth quoting against, not a sales pitch.

Book a free call