Question 1

Do you really run voice cloning and deepfake simulations?

Accepted Answer

Yes, and only under signed authorisation with an agreed target list, consent controls, an emergency stop contact and a full audit trail. Scenarios are designed to teach rather than humiliate, and every simulated call is debriefed. If your leadership is not comfortable authorising it, we will say so and scope around it.

Question 2

Will you tell us who failed?

Accepted Answer

No. Individual results go to the individual, along with the coaching. Leadership sees aggregates, trends and department-level risk. Programs that name and shame reliably produce the same outcome - people stop reporting - and concealment is what turns a two-minute incident into a two-week one.

Question 3

We are small. Is this only for large enterprises?

Accepted Answer

No. Small organisations are targeted heavily precisely because they have no security function. Engagements start at a single workshop or a one-off exposure assessment, and we deliberately keep an entry tier that a twenty-person company can afford. If you have genuinely no budget and serve a community, ask about our free monthly sessions.

Question 4

How do we start, and what does it cost?

Accepted Answer

Start with a free thirty-minute call. We talk through where you stand, what a program would look like, and whether it is worth doing - no pitch deck, no assumed findings before we have even spoken. Pricing depends entirely on headcount, scope and channels, and we will only propose work if that conversation turns up something worth doing.

Everything an attacker uses,
tested and taught

Three ways in

Not sure which of these you need?