Skip to main content
In an autonomous campaign the AI plans and adapts each call itself from the goal you set, learning from every conversation. The console calls it “the closest thing to a real, tireless attacker, run against your own team, safely and with consent.” There is no fixed script. You set the objective and the limits.
The attacker is always a consented simulation. It stops the moment someone refuses. Your own guardrails are added on top of the built-in safety rules, never instead of them.

Before you start

Steps

1

Choose Autonomous

Open Red Team, Campaigns, New Campaign. Under Step 1 · Choose how to run it, pick Autonomous (AI-driven). The options appear below the cards.
2

Set the objective and the limits

3

Choose the caller identity

Under Caller identity across calls, pick one.
4

Add guardrails

Under Extra guardrails, write one rule per line, for example “Never mention a specific real system by name.” or “Do not reference the CEO by name.” They are optional.
5

Pick a purple-team target, or leave it off

Purple-team target is optional. Leave it on the first option, Off, to call your people as normal. Or pick one of your own DeepBlocker-protected lines. The attacker then dials that line instead of contacts, to grade whether live detection catches the cloned voice. The campaign page then shows the detection rate, the time to detect, and whether the transfer gate held.
6

Finish the wizard

Pick the attacker, the people, the number and the timing, then record the authorisation. See Build a campaign and Authorise and launch.

What happens next

The attacker writes its own opening and adapts after each call, within the cap and the gap you set. What it learns on one call briefs the next. No person is called more times than the cap. Read the calls one by one in One call in detail.

Problems

The objective is empty. Write one or two sentences under Engagement objective and launch again.
Rotating callers changes the voice each call. Pick Same caller, or pick a specific voice in the voice step, which then holds on every call.
Autonomous campaigns are switched on per deployment. Write to us. See Support and contact.