Cookie settings

Choose which cookies Keepnet can use. You can change this at any time from "Cookie settings" at the bottom of every page.

Deepfake simulation

Give employees a safe deepfake to practise on

AI voice, video and meeting simulations, with consent at every step.

Book a demoSee the console

Deepfake phishing simulation

Meeting, voice call and video, in one console

Built and run in your own Keepnet tenant.

The meeting invite1 of 5

The meeting invite

A Teams, Google Meet, Zoom or Slack join page.

In the meeting

An AI agent chats with the employee, in their own language.

The voice call

A consented voice clone, with its consent record on file.

The video

Set the persona, audience, language and urgency, then approve.

A Teams, Google Meet, Zoom or Slack join page.

Example data. Names are fictional. Invites go out with the Phishing Simulator, Smishing Simulator and Quishing Simulator. Calls run on the Vishing Simulator.

Security teams running Keepnet

VodafoneArrivaArnold ClarkWhitbreadRyanaircarwowBorealisUNICEFHersheyDr. Martens
The problem

Impersonation has moved to calls and video

Most programmes still practise email only.

36%
Video calls
of organisations faced a deepfake attack on a video call
41%
Audio calls
were hit by deepfake social engineering on an audio call to an employee
10%
Programme gap
of leaders prioritise deepfake recognition and reporting, while 84% track training completion
$25.6M
One video call
lost by Arup after a deepfake CFO joined a video call
What you get

Build the habit of checking first

Practise the pause

Employees practise checking a familiar voice or face before they act.

Coach in the moment

The red flags are named as soon as it ends.

Measure the change

Behaviour before and after, in the Secure Behaviour Dashboard.

How deepfake simulation works

Set up, record consent, run

  1. The scenario step in the Keepnet console: topic, persona, audience, language, urgency and format.

    1. Set up

    Pick the channel, the scenario and who takes part.

    • Meeting, voice call or video
    • Persona, language and urgency
    • Approval before a video is made
  2. The consent statement in the Keepnet console, which must be confirmed before a photo can be used.

    2. Record consent

    No voice or face is used without it.

    • From the person shown or heard
    • A consent record for each one
    • Revocable at any time
  3. A simulated online meeting with an in-call chat. Names are fictional.

    3. Run

    The invite, call or video reaches employees.

    • Invites by email, SMS or QR code
    • Two-way AI calls
    • Coaching as soon as it ends
Consent and privacy

Every simulation runs on consent

Consent for every voice and face

Only with the agreement of the person shown or heard. Opt-in and opt-out for employees.

Limited retention

Consent lasts 90 days. Uploaded voice samples are removed within 24 hours.

Do not record

Choose not to record a call: its audio is not kept, and it is still transcribed.

Passwords are not kept

From a password typed on a simulation page, only its length and first character are kept.

Free offer

Run a deepfake simulation on your own team, free

Ask for it when you book. A short call confirms eligibility, then it runs in your own Keepnet tenant.

Book a demo

Evaluating deepfake simulation platforms

Questions to ask a deepfake simulation vendor

QuestionKeepnet
Which channels does it cover?Meeting invites, voice calls and video, alongside email, SMS and QR code.
Is consent enforced?Yes. No voice or face is used until consent is recorded in the console.
Who approves what goes out?An admin approves each deepfake video before it is made.
Can we use a leader’s voice?Yes, with their consent, which lasts 90 days and can be revoked at any time.
Are calls recorded?AI agent calls are, by default, with a transcript. Turn recording off for a call and it is still transcribed.
Does it support our languages?Yes. The AI agent chats in the employee’s own language.
Do employees get coaching?Yes, as soon as the simulation ends.
Where is the data kept?In the region you choose.
Before your security review asks

The evidence is published, not on request

ISO/IEC 27001 certification logo
Information security
ISO/IEC 27017 certification logo
Cloud security
ISO/IEC 27018 certification logo
Cloud privacy
ISO/IEC 42001 certification logo
AI management

Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.

Encryption
AES-256 at rest, TLS 1.2 or 1.3 in transit
Data residency
In the region you choose: the UK, EU, US, Canada, the UAE or Türkiye. Microsoft Azure hosts every region except Türkiye, which AWS hosts.
Data protection
EU and UK GDPR, DPA 2018. The DPA is published with the SCCs, the UK Addendum and the sub-processor list

Gartner Peer Insights™

What security teams say

4.9/5from 104 ratings
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
Chief Officer, Energy and Utilities10B - 30B USD · Reviewed 13 Nov 2025
Gartner Peer Insights™Read review
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
IT Manager, Consumer Goods<50M USD · Reviewed 17 Oct 2025
Gartner Peer Insights™Read review
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
IT Manager, Consumer Goods<50M USD · Reviewed 17 Oct 2025
Gartner Peer Insights™Read review
"Phishing Simulation Campaigns were easy to run."
ITGC Analyst, Transportation50M - 250M USD · Reviewed 3 Aug 2025
Gartner Peer Insights™Read review
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
Senior IT Manager, Manufacturing50M - 250M USD · Reviewed 29 Jul 2025
Gartner Peer Insights™Read review
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
Manager, IT Security and Risk Management, Banking<50M USD · Reviewed 8 Jul 2025
Gartner Peer Insights™Read review
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
Manager, IT Security and Risk Management, Manufacturing1B - 3B USD · Reviewed 7 Jul 2025
Gartner Peer Insights™Read review
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
Technological Infrastructure Manager, Manufacturing500M - 1B USD · Reviewed 4 Jul 2025
Gartner Peer Insights™Read review
"The simulations and campaigns are very customisable and realistic."
Manager, IT Security and Risk Management, Software<50M USD · Reviewed 25 Jun 2025
Gartner Peer Insights™Read review
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Manager, IT Security and Risk Management, Banking500M - 1B USD · Reviewed 8 Feb 2024
Gartner Peer Insights™Read review

Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. Gartner and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

Questions

What buyers ask about deepfake simulation

Short answers first. New to the topic? Read what deepfake phishing simulation is.

A safe, consented exercise in which employees practise spotting a deepfake voice, video or meeting. They learn the red flags as soon as it ends, and reporting is recorded.

You pick the channel, the scenario and the audience, and record consent. The invite, call or video reaches employees, and coaching appears as soon as it ends.

Yes, with the CEO’s consent. Consent lasts 90 days and can be revoked at any time. Uploaded voice samples are used only to build the clone and are removed within 24 hours.

No. Any employee group can take part, from finance to the IT service desk.

Let them practise on a simulated call, then coach in the moment: the pressure, the urgency, the unusual request, and checking on a known channel. Measure behaviour before and after in the Secure Behaviour Dashboard.

Who should take part. For a leader’s voice or face, that person’s consent and a voice sample or photo.

Book a demo

See a deepfake simulation in your console

  1. The three simulation typesMeeting, voice call and video.
  2. Consent and privacyHow consent is recorded, kept and revoked.
  3. What employees learnThe coaching they see when it ends.
  4. Your rolloutWhich teams to start with, and when.
Tom, Matt, Ellie and Shonna, the Keepnet team you will meet
Who you will actually meet
Tom, Matt, Ellie and Shonna
Across UK and US time zones

Book a demo

Thirty minutes, no cost and no obligation.

Required
Required
Please use your work email address
Where your organisation is based.
Please pick a country from the list
Start with + for another country code.
Please enter a phone number we can call you on
Required
Employees
Please pick a size
Please pick one

Bring your setup and questions, and we will map Keepnet to your programme. No employee data needed.

Thank you, your request is in

A confirmation is on its way to your inbox.

Sources

  1. Gartner, “Deepfake Identity Threats: Mitigate Risk in Online Meetings” (G00846628, May 2026).
  2. Gartner, “Cybersecurity Threat: Deepfake Identity Impersonation” (G00847786, May 2026), 2026 Gartner CISO Role-Based Survey (n=297).
  3. Gartner, “6 Ways to Transform Your Cybersecurity Awareness Program” (G00840741, March 2026), 2025 Secure Behavior Strategies Survey (n=65).
  4. CNN, Hong Kong Police briefing on the Arup case, February 2024; Financial Times, May 2024.
  5. Keepnet console, dash.keepnetlabs.com: Landing Page Templates, Deepfake Video Assistant and Voice Clone. Names are fictional.