Ghosteye

Ghosteye is a security awareness training platform that uses autonomous AI agents to conduct realistic attack simulations against employees and outsourced help desks. The platform profiles digital footprints to create target profiles, then simulates attacks using fabricated personas such as coworkers, vendors, or executives. The system measures employee risk scores based on actual behavior during simulations rather than theoretical assessments. It employs adaptive agents that continuously learn and adjust attack difficulty based on target responses. Training is delivered just-in-time when employees fail simulations, using generative content rather than static templates. The platform includes IRIS (Integrated Reconnaissance & Intelligence Suite), which maps workforce attack surface by correlating identity fragments, access patterns, and contextual signals. It creates what the company calls a "human exposure map" to identify vulnerabilities. Ghosteye offers two main products: Beacon for conducting simulations and Overseer for monitoring. The platform can target both human employees and outsourced help desk personnel. For help desk testing, AI voice agents attempt to reset passwords, bypass MFA, and gain unauthorized access. The system uses spaced repetition to create durable security habits and provides adaptive, configurable agents that operate autonomously. Simulations are designed to mimic real attacker tactics rather than generic compliance-focused scenarios.