Skip to main content
Not during the call, unless you choose otherwise. A warm-up notice, if you turn it on, sends a short text or email 2 to 30 minutes before the call saying, for example, that their IT team will ring; it does not call it a test. With coaching on, a person who gives the caller what it asked for hears at the end that it was a training exercise. Everyone called must be your own staff, inside the scope your authoriser confirmed. See Before you test anyone.
Only if coaching is on for the campaign; it is off by default. The attacker stops, and a separate, neutral DeepBlocker voice says: “Hello, this is DeepBlocker. The call you just had was a security training exercise arranged by your company. The caller was not real.” It then gives a two or three sentence debrief drawn from the call and hangs up. If the person has an email address on their record, the same debrief and an optional training link follow by email. See Coaching at the end of a failed call.
No. Staff have no login, and results live in your console for your team. The only things a person receives are the warm-up notice, if on, and the coaching reveal plus its email note, if on. See Every message DeepBlocker sends to your staff.
Not by default. Results and the auditor pack show the person’s team instead of their name, and phone numbers are masked. An owner or admin can turn on Show names in reports on the Fair testing page. See Fair testing rules.
Each call counts for its real length, measured to the hundredth of a minute, not rounded up. The licence panel on your Account page shows minutes used and minutes left. A licence includes 200, 1,000 or 2,500 minutes a year depending on your size, and a workspace without a licence yet has 5 test minutes. See How minutes work.
Yes, unless your Fair testing rules say otherwise. Cooling-off days leaves a person alone for a set time after a call from another campaign; Most calls per quarter caps how many test calls they get in a rolling 90 days. Both are off until you set them. Retries and later steps of the same campaign are never counted against these limits. See Fair testing rules.
One of the caller numbers DeepBlocker has allocated to your workspace, UK or US, which you pick on the From where and when step. If none has been allocated, the calling system uses its default number. Ask us for a number in the country you call. See Your caller numbers.
Every campaign has a call window, 09:00 to 17:00 by default, in the timezone you choose. An immediate campaign waits for that window unless you tick Call right now, even outside my hours. Quiet hours on the Fair testing page apply to every campaign and hold a call until they end. See Schedule, pacing and retries.
Yes. Press Stop all calls on the Campaigns page. No new call goes out for your workspace; calls already in progress finish on their own. Press Resume calling when you are ready, then launch or re-run the campaign. See Pause, resume, stop everything.
Recordings are kept for 90 days and then deleted, under the self-service licence terms. You can play a call’s audio from its detail window during that time. For anything else about storage, write to us. See Support and contact.
Yes. Export for auditors on a campaign’s report builds a pack as HTML or a printable PDF, mapped to NIS2, DORA, ISO 27001, PCI DSS, Cyber Essentials, cyber insurance and the Jersey JFSC, with a planned retest date. Names stay hidden unless Show names in reports is on, and every export is logged. The pack is evidence that supports these controls, not proof of compliance. See Export for auditors.
It says whether DeepBlocker’s own deepfake detector would have flagged the cloned voice on that call. Caught means it would; Missed means it would not; Not scored means the call was not run through the detector. A call is caught when its fake score reaches the threshold, 80% by default. See Read your results.
Yes, choose Help desk test when you create the campaign. The caller rings one to five help desk numbers pretending to be one of up to 20 employees who agreed to be impersonated, and asks for a reset. The result records what verification the agent did: callback to a number on file, manager approval, a ticket, identity questions, or none. See Run a help desk test.
The console is in English, French and Greek. Calls can be made in the language you set on the attacker: English, Spanish, French, German, Italian, Portuguese, Dutch, Polish, Russian, Chinese, Japanese, Korean, Hindi or Turkish. Greek is not on the call list. See Create an attacker.
Yes. An owner or admin invites them by email from the Members tab, as a member or an admin. Every member can build and launch campaigns. Each person sees the campaigns they created, and only the creator can edit, launch or archive theirs. See Invite your team and roles.
Launch is refused and a window titled Out of red-team minutes shows your licence, the minutes left and the price of extra minutes. Calls already in progress finish. Email hello@deepblocker.ai to top up or extend; minutes are not bought in the app. See When you run out.
No. Your call audio and cloned voices are not used to train our providers’ models. We opt out of model-improvement programmes in our speech-to-text calls and hold the AI providers to their no-training terms. See Support and contact.
Write to contact@deepblocker.ai with the campaign name and what you saw. Privacy questions go to privacy@deepblocker.ai, and licence or minutes questions to hello@deepblocker.ai. See Support and contact.