An AI agent stands on your most valuable phone lines and checks every caller in real time. Deny by default. Allow only the verified.
This is the heart of Shield, and the part that does not go out of date. A payment desk hears instructions from a small, known set of people, perhaps 30 to 200 voices. Enroll them once. From then on, the agent knows who is real.
Each authorised person reads a few short phrases on the phone. We compute a mathematical fingerprint of their voice. New voice-AI models coming out every week do not change what your real people sound like, so this never expires.
Is the voice live and human, not a clone? Is it one of the enrolled people? Does the request make sense against policy? Three independent signals, so a clone that beats one is caught by the next.
Verified and in-policy passes through, logged. Anything unusual is held, escalated to a human, with the full context of why. Deny by default, allow the verified.
Whatever the verdict, a tamper-proof record is written: time, model version, scores, decision. Your proof that the line was protected.
Priced per protected line, so you spend money only where the loss would be catastrophic: the payment desk, the CFO's direct number, the dealing line.
Most firms start with Assess to find the weak line, then Shield to close it.