Vishing simulator
Vishing simulations that turn risky calls into reports
Keepnet Vishing Simulator calls your employees with realistic voice phishing scenarios, so you can measure who spots the attack and show the board.
Measure call risk across your teams from day one
5,500+ ready-made call scenarios in 39 languages, with coaching after every call. Preview call scenarios.
Calls are one channel. Email, SMS and QR codes run alongside them in the multi-channel phishing simulator.
Security teams running Keepnet
Calls need their own practice
How a vishing simulation works
Call, coach, measure
1. Call
Pick a scenario, a voice and the employees.
- Calls from Keepnet-owned numbers
- Recorded, text-to-speech or AI agent
- Approve before anything is placed
2. Coach
Spoken coaching at the end of the call.
- Adapted to what the employee did
- Praise when they held back
- Training to follow, if you choose
3. Measure
A result and a timeline for each call.
- Answered, disclosed or no response
- Each stage of the call, timed
- Next steps for the employee
- Reports and disclosures compared across campaigns
Recorded, text-to-speech or an AI agent
Your own recording
Upload audio for each step of the call.
Text-to-speech
A scripted call in the voice and language you pick.
Two-way AI agent
Listens and replies within the scope you set.
Voice cloning only with the consent of the person whose voice is used. Prefer experienced social engineers on the line? See the vishing assessment.
Voices and numbers your employees recognise
- 5,500+vishing templates
- 39template languages
- 400+AI voices
- 77languages the voices speak
Keepnet-owned numbers
Purchased and configured for each country. Never spoofed.
Local numbers in 19 countries
Pick the caller number for each campaign, from the US, the UK, Türkiye and more.
Consented voice clones
Authorisation first, then the sample.
The real console, not a video
Build a call, hear the coaching at the end, then read the report.
Click to start a live preview
No form, no sales call. Best in landscape on a phone.
Start the tourThe interactive product tour of the Keepnet console
The tour will not open in this page
Your browser or network is blocking the embedded frame.
Open the tour in a new tabThe teams that take the most calls
Smart groups
Repeat clickers, new hires and untrained employees.
By role
Finance, help desk and executive assistants, as their own groups.
Calling hours
The days and hours you set, in your time zone.
Where it is already running
Agents build the call, you approve it
Describe the scenario. Review the summary before the call is placed.
Persona and scope
The agent stays inside the information you allow.
Approval first
Approval by default. Autonomy only if an admin allows it.
Deepfake is opt-in
You approve who appears in one.
Employees report a suspicious call in one tap
Each report counts as secure behaviour.
Recent reportsSMS and calls, each with its result. 
The verdictWith the reasons and what to do. 
Report historyFilter by SMS or calls, and by result.
- One tap to reportKeepnet SMS and Call Reporter, on iPhone and Android.
- The right behaviour, countedA reported simulation shows on the employee’s record.
- Only what the employee reportsThe app does not read messages or record calls.
Suspicious calls that are not simulations go to your security team in Incident Responder.
See whether vishing simulations change behaviour
A result for each call, stage by stage: who shared information and who reported the call.
The call becomes the lesson
Spoken coaching at the end of the call, then next steps.
Questions to ask a vishing simulation vendor
| Question | Keepnet |
|---|---|
| Does the caller respond to the employee? | Yes, with a two-way AI agent call. |
| Can we use an executive’s voice? | Only with that person’s consent. |
| Whose numbers are the calls from? | Keepnet-owned local numbers in 19 countries, never spoofed. |
| Are calls recorded? | AI agent calls are, by default, with a transcript. Turn recording off for a call and it is still transcribed. |
| Where is the data kept? | In the region you choose. |
| Can we buy it on its own? | Yes. |
The evidence is published, not on request
Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.
Pricing
Buy the vishing simulator on its own
Priced per employee, as part of the secure behaviour management platform.
See the plan prices- Pay only for what you runStart with one simulator and add the rest later.
- Priced per employeeThe more employees you cover, the less you pay per employee.
- Add to what you runVishing simulations alongside your email, SMS and QR code simulations, in one console.
- Try before you commitTry and buy, or a proof of value with your own employees.
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
"The simulations and campaigns are very customisable and realistic."
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Gartner's notice on these reviews is at the foot of the page.
Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. Gartner and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.
What buyers ask about vishing simulation
Short answers first. New to the topic? Read what vishing is.
A vishing simulation places a realistic, harmless voice phishing call to an employee and shows who shares information and who reports the call.
Coaching follows at the end of the call, so each campaign builds safer habits on the phone.
You pick a scenario, a voice and the employees, then approve the call. It is a vishing test your own team runs from the console.
Keepnet places it from a Keepnet-owned number and records the result for each employee.
Yes. A vishing test is a simulated voice phishing call that your own team runs from the console, to see who shares information and who reports the call.
Run it again after the coaching, so the habit holds.
In most countries, yes, when the simulation is part of a documented security programme and follows local employment and data protection law.
This is not legal advice. Check with your counsel, and with your works council where you have one.
Both expect regular security training for staff: NIS2 through its cyber hygiene and training measures, DORA through compulsory ICT security awareness training.
Vishing simulations add evidence for that, with coaching at the end of each call and a result for each employee. This is not legal advice.
The Vishing Simulator uses recordings, text-to-speech or a two-way AI agent.
If you want experienced social engineers on the line, see the vishing assessment.
Yes, with the consent of the person whose voice is used. The console asks for authorisation before a sample is added.
AI agent calls are, by default: you get a summary, the full transcript and next steps for each call. Choose Do not record this call and the call is placed without keeping its audio; the conversation is still transcribed.
From Keepnet-owned local numbers in 19 countries, including the United States, the United Kingdom, Türkiye, Australia, Brazil, India, Mexico, Portugal, Saudi Arabia and South Africa. You pick the number for each campaign. Calls are never spoofed.
Templates come in 39 languages, and 400+ AI voices speak 77 languages.
The AI agent says it was a simulation and gives spoken coaching suited to what the employee did. Next steps and training can follow.
With the free Keepnet SMS and Call Reporter app for iPhone and Android. A reported simulation counts as the right behaviour on the employee's record.
Track how many employees report the call and how many share information, and compare campaigns over time.
Each call has a result and a timeline of its stages.
Pick from 5,500+ ready-made call scenarios in 39 languages, or describe your own and an AI agent builds it for your approval.
Finance, help desk and executive assistants are often set up as their own groups.
Most teams settle on a regular rhythm, such as monthly or quarterly, alongside their other channels.
Teams that take the most calls can get more through smart groups.
Yes. It can be bought on its own, priced per employee, or inside a plan with Keepnet's other simulators and training.
See it with your teams in mind
- A call in your languageA local number, a voice and a persona you choose.
- One campaign, end to endScenario, employees, schedule and report.
- What employees hearThe call and the coaching at the end of it.
- Your rolloutGroups, consent for voices and the SMS and Call Reporter app.
Book a demo
Thirty minutes, no cost and no obligation.
Thank you, your request is in
A confirmation is on its way to your inbox.
Thirty minutes with the Keepnet team, on Microsoft Teams. Your details are already filled in.
Prefer to pick a time later? The team will follow up within one working day.
Your demo is booked
A calendar invite is on its way to your inbox, with a Microsoft Teams link.
The booking calendar will not open in this page.
Open the calendar in a new tabSources
- Keepnet console, dash.keepnetlabs.com, read 16 October 2026: Vishing Simulator templates, campaign wizard and the AI agent call flow (call summary, call report, timeline and next steps) and the caller phone numbers offered in the campaign wizard (101 numbers in 19 countries: Australia, Brazil, Chile, El Salvador, Greece, Guatemala, India, Malaysia, Mexico, Morocco, the Philippines, Portugal, Saudi Arabia, South Africa, Türkiye, the United Kingdom and the United States). Names and numbers are masked.
- Keepnet content library statistics, stats.keepnetlabs.com, 16 October 2026: voice phishing templates and their languages, AI voices and the languages they speak.
- Gartner, G00847786 (Akif Khan, 28 May 2026), 2026 Gartner CISO Role Survey (n=297). GARTNER is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.
- Verizon, 2026 Data Breach Investigations Report, p. 50. Median click rates in phishing simulations: about 2% for phone-based and about 1.4% for email, so roughly 40% higher on phones. Keepnet is a contributor (p. 118).
- Keepnet documentation, doc.keepnetlabs.com: Vishing Simulator and the Keepnet SMS and Call Reporter app.