Breacher.ai has launched the OSES™ AI Vishing Simulator, a self-run voice phishing simulator that uses agentic AI to place real phone calls to employees, help desks, and voicemails, then hold live conversations with whoever answers. The product is available now and starts at $199 a month, with pricing published on the company's website. The announcement matters because voice phishing has become a leading way into enterprise networks, and most organizations have never tested whether their verification procedures hold up under pressure.
The threat data behind the launch is stark. Mandiant's M-Trends 2026 report found that voice phishing accounted for 11 percent of intrusions in its 2025 investigations, making it the second most common initial infection vector, ahead of email phishing at 6 percent. CrowdStrike's 2025 Global Threat Report recorded a 442 percent rise in vishing between the first and second halves of 2024. A phone call reaches an employee with no email gateway, link scanner, or reputation score in front of it. The verification procedure is the only control in the path, and most organizations have never tested whether it holds when someone on the line pushes back.
The simulator brings seven capabilities into one product: real phone calls on live phone lines rather than recordings or robocalls; outbound calls to employees posing as IT support, an executive, or a vendor; inbound calls to the service desk requesting password resets, MFA re-enrolment, or account changes; voicemail drops that set up a callback answered live by the agent in the same persona; deepfake voice using a synthetic voice or a consented clone of a real executive; agentic AI that listens, adapts, handles objections, and decides what to say next toward the campaign objective; and prompt-built pretexts so a security team can describe the caller, the reason for the call, and the objective in plain language, or paste in a vishing call someone reported.
Security teams run the simulator themselves in four steps. They write the pretext as a prompt, choose a synthetic or consented cloned voice, and launch calls against users synced from Microsoft Entra ID or Google Workspace, with no endpoint agent and no phone system changes. Every call rolls into the OSES™ Risk Score, which records how far the worst call progressed (DEPTH) and how widely calls succeeded across the organization (SPREAD), benchmarked against the customer's sector.
Safeguards are built into the product. Executive voices are cloned only with the consent of the person being cloned, confirmed by a biometric check and voice verification before anything is generated, and an administrator cannot authorize cloning someone else. Every campaign runs under signed authorization, call recording is configured to the consent rules of each jurisdiction in scope, and reporting is organizational, with no named individuals.
Jason Thatcher, Founder and CEO of Breacher.ai, said the phone call is now the front door and the person who answers it is working without a filter, a gateway, or a second opinion. He added that AI agents can already hold that conversation at scale, and the only way to know whether a verification procedure holds is to call it the way an adversary would. The simulator is designed so any security team can do that this month, not next budget cycle. Organizations that want email, SMS, QR, Microsoft Teams, and live video avatars orchestrated alongside voice can move to the full OSES™ Platform and keep their OSES™ Risk Score baseline, and Breacher.ai also offers managed delivery for teams that want the simulator run for them.
