Inspiration
I was inspired to create this project because of my years of industry experience in cybersecurity. I’ve seen firsthand how traditional phishing simulations—especially for voice phishing (vishing)—fall short by failing to test how employees actually respond when pressured. I wanted to build a smarter solution that captures not just awareness, but real-time behavior and decision-making under threat.
What it does
VishAlyze.ai is an AI-powered vishing simulation and training platform. It:
Delivers realistic, AI-generated scam calls to employees
Captures and records how they respond
Analyzes verbal responses using GPT and speech-to-text
Provides personalized feedback and risk scoring
Gives security teams a full dashboard to manage campaigns, listen to recordings, and build training content from real scenarios
How we built it
Voice Generation: We use ElevenLabs to create natural-sounding, AI-driven scam call audio
Call Delivery & Recording: Twilio powers programmable calls and voice recording
Speech Analysis: We use Whisper (OpenAI) to transcribe user responses
Feedback Engine: GPT-4o analyzes tone, word choice, and security posture
Dashboard: Built with React + Supabase for managing targets, reviewing calls, and launching campaigns
Challenges we ran into
Designing realistic but ethical scam call scenarios
Tuning AI feedback to be actionable without false positives
Handling variability in human speech and noise during transcription
Keeping the UX simple for cybersecurity teams while offering deep insights
Accomplishments that we're proud of
Creating the first simulation that actively records and learns from verbal responses
Building a complete voice threat simulation pipeline end-to-end in a short time
Designing a gamified feedback loop to make training engaging and effective
Crafting a tool that’s easy for security teams to deploy but powerful enough for real-world resilience
What we learned
Response behavior is just as important as detection in social engineering defense
Voice phishing is still an underserved but growing threat vector
With the right AI tools, we can go beyond training and into real behavior modeling
Security awareness platforms can be smart, engaging, and measurable
What's next for VishAlyze.ai
🎧 Real-time coaching mode: Let users get feedback live during simulated calls
🎮 Gamified team competitions: Engage entire organizations in weekly phishing challenges
🤝 Partnerships with MSPs and security vendors
📈 Enterprise reporting & audit logs for SOC2, HIPAA, and ISO compliance
Built With
- bolt
- chatgpt
Log in or sign up for Devpost to join the conversation.