Cookie settings

Choose which cookies Keepnet can use. You can change this at any time from "Cookie settings" at the bottom of every page.

Vishing simulator

Vishing simulations that turn risky calls into reports

Secure behaviour you can measure and show the board.

Book a demoSee it running

Voice phishing simulation

Measure call risk across your teams from day one

5,400+ ready-made call scenarios in 39 languages, with coaching after every call.

Template1 of 5

Template
Choosing a vishing template in the Keepnet campaign wizard: the Help Desk Ticket Support template, its text-to-speech steps and the first step's script, in English (American) with an AI voice.
Text-to-speech
A new vishing template in the Keepnet console: the template's language, the text-to-speech voice picked from a list of AI voices, and the first step's text.
The call
An AI agent's call summary in the Keepnet console, to approve before the call is placed: persona, recipient, pretext, the ask, urgency, scope, voice and language. Names are fictional and numbers masked.
AI agent
An AI agent's finished call in the Keepnet console: Data Disclosed, the call recording and the simulation timeline. Names are fictional.
Report
A vishing campaign report in the Keepnet console: answered, vished and no response counts, the campaign's details and its template's steps. Numbers masked.

Calls are one channel. Email, SMS and QR codes run alongside them in the multi-channel phishing simulator.

Trusted every day by security teams that measure behaviour, not attendance

VodafoneArrivaArnold ClarkWhitbreadRyanaircarwowBorealisUNICEFHersheyDr. Martens
Why calls

Calls need their own practice

41%
Audio calls
of organisations saw deepfake-assisted social engineering on an audio call
40%
Higher on phones
median click rate in phone-based simulations than in email ones

How a vishing simulation works

Call, coach, measure

  1. The call summary an AI agent prepares, close up: persona, recipient, pretext, the ask, urgency and caller ID. Names are fictional and numbers masked.

    1. Call

    Pick a scenario, a voice and the employees.

    • Calls from Keepnet-owned numbers
    • Recorded, text-to-speech or AI agent
    • Approve before anything is placed
  2. Next steps after a call in the Keepnet console: report the MFA code disclosure, never share MFA codes and verify IT calls independently, each with a Create button for training.

    2. Coach

    Spoken coaching at the end of the call.

    • Adapted to what the employee did
    • Praise when they held back
    • Training to follow, if you choose
  3. A call's simulation timeline in the Keepnet console, each stage timed: introduction, credibility building, data request, data disclosed and simulation reveal. Names are fictional.

    3. Measure

    A result and a timeline for each call.

    • Answered, disclosed or no response
    • Each stage of the call, timed
    • Next steps for the employee
Call modes

Recorded, text-to-speech or an AI agent

Your own recording

Upload audio for each step of the call.

Text-to-speech

A scripted call in the voice and language you pick.

Two-way AI agent

Listens and replies within the scope you set.

Voice cloning only with the consent of the person whose voice is used. Prefer experienced social engineers on the line? See the vishing assessment.

Voice clone authorisation step in the Keepnet console.
Voices and numbers

Voices and numbers your employees recognise

  • 5,400+vishing templates
  • 39template languages
  • 400+AI voices
  • 77languages the voices speak

Keepnet-owned numbers

Purchased and configured for each country. Never spoofed.

Local numbers in 17 countries

Pick the caller number for each campaign, from the US, the UK, Türkiye and more.

Consented voice clones

Authorisation first, then the sample.

See it running

The real console, not a video

Build a call, hear the coaching at the end, then read the report.

Click to start a live preview

No form, no sales call. Best in landscape on a phone.

Start the tour

The interactive product tour of the Keepnet console

Targeting

The teams that take the most calls

Smart groups

Repeat clickers, new hires and untrained employees.

By role

Finance, help desk and executive assistants, as their own groups.

Calling hours

The days and hours you set, in your time zone.

Customer results

Where it is already running

“We were seeing more voice and SMS phishing targeting executives, finance teams and IT helpdesks. Keepnet gave us a way to simulate those attacks, train the people being targeted and give employees a simple way to report suspicious SMS and calls when they happen for real.”
Yasar Geren, Director and Extended Executive Committee Member, AXA Insurance
Agentic AI

Agents build the call, you approve it

Describe the scenario. Review the summary before the call is placed.

Persona and scope

The agent stays inside the information you allow.

Approval first

Nothing is placed until you approve it.

Deepfake is opt-in

You approve who appears in one.

Reporting

Employees report a suspicious call in one tap

Each report counts as secure behaviour.

  • Keepnet SMS and Call Reporter. The app home screen: report counts and recent reports, an SMS marked Malicious / Phishing, an SMS marked Spam and a call marked Phishing.
    Recent reportsSMS and calls, each with its result.
  • Keepnet SMS and Call Reporter. Security analysis of a reported SMS: verdict Malicious / Phishing, the message, the report reference, the reasons and the recommended action.
    The verdictWith the reasons and what to do.
  • Keepnet SMS and Call Reporter. My Reports: every report the employee has sent, filtered by SMS or calls and by result.
    Report historyFilter by SMS or calls, and by result.
  • One tap to reportKeepnet SMS and Call Reporter, on iPhone and Android.
  • The right behaviour, countedA reported simulation shows on the employee’s record.
  • Only what the employee reportsThe app does not read messages or record calls.

Suspicious calls that are not simulations go to your security team in Incident Responder.

Measurement

See whether vishing simulations change behaviour

A result for each call, stage by stage: who shared information and who reported the call.

Call report in the Keepnet console with the simulation timeline. Names are fictional and numbers masked.
After the call

The call becomes the lesson

Spoken coaching at the end of the call, then next steps.

AI agent call, in the Keepnet console
The call summary an AI agent prepares for approval: persona, recipient, pretext, the ask, urgency, caller number, language, voice and the allowed scope. Names and numbers masked.
The call report: Data Disclosed, the recording, and the simulation timeline from introduction to simulation reveal, with the disclosed item listed.
The call transcript: at the end of the call the AI agent says it was a security awareness simulation and explains the safer move.
Next steps after the call: report it, never share MFA codes, verify IT calls independently, each with a Create button for training.

Example call. Names and numbers are fictional or masked.

Evaluating vishing simulation tools

Questions to ask a vishing simulation vendor

QuestionKeepnet
Does the caller respond to the employee?Yes, with a two-way AI agent call.
Can we use an executive’s voice?Only with that person’s consent.
Whose numbers are the calls from?Keepnet-owned local numbers in 17 countries, never spoofed.
Are calls recorded?Only if you choose, for training review.
Where is the data kept?In the region you choose.
Can we buy it on its own?Yes.
Before your security review asks

The evidence is published, not on request

ISO/IEC 27001 certification logo
Information security
ISO/IEC 27017 certification logo
Cloud security
ISO/IEC 27018 certification logo
Cloud privacy
ISO/IEC 42001 certification logo
AI management

Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.

Encryption
AES-256 at rest, TLS 1.2 or 1.3 in transit
Data residency
In the region you choose: the UK, EU, US, Canada, Türkiye or the UAE, on Microsoft Azure, a SOC 2 Type 2 audited platform
Data protection
EU and UK GDPR, DPA 2018. The DPA is published with the SCCs, the UK Addendum and the sub-processor list

Gartner Peer Insights™

What security teams say

4.9/5from 104 ratings
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
Chief Officer, Energy and Utilities10B - 30B USD · Reviewed 13 Nov 2025
Gartner Peer Insights™Read review
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
IT Manager, Consumer Goods<50M USD · Reviewed 17 Oct 2025
Gartner Peer Insights™Read review
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
IT Manager, Consumer Goods<50M USD · Reviewed 17 Oct 2025
Gartner Peer Insights™Read review
"Phishing Simulation Campaigns were easy to run."
ITGC Analyst, Transportation50M - 250M USD · Reviewed 3 Aug 2025
Gartner Peer Insights™Read review
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
Senior IT Manager, Manufacturing50M - 250M USD · Reviewed 29 Jul 2025
Gartner Peer Insights™Read review
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
Manager, IT Security and Risk Management, Banking<50M USD · Reviewed 8 Jul 2025
Gartner Peer Insights™Read review
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
Manager, IT Security and Risk Management, Manufacturing1B - 3B USD · Reviewed 7 Jul 2025
Gartner Peer Insights™Read review
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
Technological Infrastructure Manager, Manufacturing500M - 1B USD · Reviewed 4 Jul 2025
Gartner Peer Insights™Read review
"The simulations and campaigns are very customisable and realistic."
Manager, IT Security and Risk Management, Software<50M USD · Reviewed 25 Jun 2025
Gartner Peer Insights™Read review
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Manager, IT Security and Risk Management, Banking500M - 1B USD · Reviewed 8 Feb 2024
Gartner Peer Insights™Read review

Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates, and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates.

Questions

What buyers ask about vishing simulation

Short answers first. New to the topic? Read what vishing is.

A vishing simulation places a realistic, harmless voice phishing call to an employee and shows who shares information and who reports the call.

Coaching follows at the end of the call, so each campaign builds safer habits on the phone.

You pick a scenario, a voice and the employees, then approve the call. It is a vishing test your own team runs from the console.

Keepnet places it from a Keepnet-owned number and records the result for each employee.

The Vishing Simulator uses recordings, text-to-speech or a two-way AI agent.

If you want experienced social engineers on the line, see the vishing assessment.

Yes, with the consent of the person whose voice is used. The console asks for authorisation before a sample is added.

Only if you choose. Recording and transcripts are used for training review.

From Keepnet-owned local numbers in 17 countries, including the United States, the United Kingdom, Türkiye, Australia, Brazil, India, Mexico, Portugal, Saudi Arabia and South Africa. You pick the number for each campaign. Calls are never spoofed.

Templates come in 39 languages, and 400+ AI voices speak 77 languages.

The AI agent says it was a simulation and gives spoken coaching suited to what the employee did. Next steps and training can follow.

With the free Keepnet SMS and Call Reporter app for iPhone and Android. A reported simulation counts as the right behaviour on the employee's record.

Track how many employees report the call and how many share information, and compare campaigns over time.

Each call has a result and a timeline of its stages.

Yes. It can be bought on its own, priced per employee, or inside a plan with Keepnet's other simulators and training.

Book a demo

See it with your teams in mind

  1. A call in your languageA local number, a voice and a persona you choose.
  2. One campaign, end to endScenario, employees, schedule and report.
  3. What employees hearThe call and the coaching at the end of it.
  4. Your rolloutGroups, consent for voices and the SMS and Call Reporter app.
Tom, Matt, Ellie and Shonna, the Keepnet team you will meet
Who you will actually meet
Tom, Matt, Ellie and Shonna
Across UK and US time zones

Book a demo

Thirty minutes, no cost and no obligation.

Required
Required
Please use your work email address
Where your organisation is based.
Please pick a country from the list
Start with + for another country code.
Please enter a phone number we can call you on
Required
Employees
Please pick a size
Please pick one

Bring your setup and questions, and we will map Keepnet to your programme. No employee data needed.

Thank you, your request is in

A confirmation is on its way to your inbox.

Sources
  1. Keepnet console, dash.keepnetlabs.com, read 16 October 2026: Vishing Simulator templates, campaign wizard and the AI agent call flow (call summary, call report, timeline and next steps) and the caller phone numbers offered in the campaign wizard (98 numbers in 17 countries: Australia, Brazil, Chile, El Salvador, Greece, Guatemala, India, Malaysia, Mexico, Morocco, the Philippines, Portugal, Saudi Arabia, South Africa, Türkiye, the United Kingdom and the United States). Names and numbers are masked.
  2. Keepnet content library statistics, stats.keepnetlabs.com, 16 October 2026: voice phishing templates and their languages, AI voices and the languages they speak.
  3. Gartner, G00847786 (Akif Khan, 28 May 2026), 2026 Gartner CISO Role Survey (n=297). GARTNER is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
  4. Verizon, 2026 Data Breach Investigations Report, p. 50. Median click rates in phishing simulations: about 2% for phone-based and about 1.4% for email, so roughly 40% higher on phones. Keepnet is a contributor (p. 118).
  5. Keepnet documentation, doc.keepnetlabs.com: Vishing Simulator and the Keepnet SMS and Call Reporter app.

Page reviewed