👻👁️ GhostEye Launches: The AI-Powered Human Pentesting Platform
👻👁️ GhostEye recently launched!
"Test your human firewall, at will."
TL;DR GhostEye offers offensive AI agents that generate sophisticated social engineering campaigns across a multitude of attack vectors. With the growth of AI-enabled impersonation and a lack of enablement within organizations to test your people-level security at scale, GhostEye knew it was time to give teams the ability to do exactly that. Have you recently been targeted? Reach out via email and talk to the founders here.
https://www.youtube.com/watch?v=J5COEwY09Kc
Founded by Mohammad Eshan & Charles Antoine Malenfant
👥 The Team
The founders met at BlackRock, where Eshan was on the Red Team, evading all sorts of enterprise defenses, and making it past the best security tools, and Charles was part of the AI Engineering team. Charles built multi-agent systems deployed to hundreds of clients in production while simultaneously obtaining his ML expertise at Columbia.
❌ The Problem
Social engineering has become the dominant threat vector, and AI is making it devastatingly effective:
The numbers are alarming:
- $12 billion in losses from phishing attacks alone in 2024.
- 442% growth in vishing (voice phishing) attacks in 2024, driven by voice cloning and AI impersonation tools.
- $40 billion in AI-enabled fraud expected in the US by 2027.
- 72% of organizations report rising cyber risks fueled by AI-driven vishing attacks.
Meanwhile, traditional security training has been proven ineffective:
- Recent research from UCSD Health studying 19,789 personnel found that “standard, out-of-the-box industry training is not efficacious in preventing users from clicking on emails”.
- An ETH Zurich study of 14,000 employees discovered training actually made things worse – employees felt safer and were more likely to fall for phishing attacks.
- IBM Research shows 3x click effectiveness for targeted phishing campaigns that add phone calls, yet most training only covers email.
Remember that mandatory training you were required to do last June? How much of it do you still remember? When attackers can clone voices with just three seconds of audio and create personalized social engineering campaigns in minutes, checkbox compliance training isn’t ineffective – it’s giving organizations false confidence while leaving them completely vulnerable
✅ The Solution
GhostEye lets you test your people-level security through customized social engineering campaigns tailored to your teams and the individuals within them. Here’s how:
Intelligence-Driven Targeting:
- GhostEye leverages Open Source Intelligence (OSINT) to gather publicly available information about your organization, and people within your organization.
- Sync with identity providers (Google Workspace, Azure AD, Okta, etc.) to understand employee group exceptions, allowing GhostEye agents to comprehend day-to-day workflows.
- Build realistic attack scenarios based on actual organizational structure and relationships.
Multi-Vector Attack Chains:
- Email → Text → Call sequences that mirror real-world attack progression.
- Chained attacks create urgency and pressure – the same psychological tactics attackers employ.
- Each simulation adapts based on user responses, just like real attackers would.
Psychology-Based Testing:
- GhostEye exploits the same cognitive biases real attackers use: authority, urgency, and trust.
- Simulations trigger genuine emotional responses that reveal true vulnerability levels.
Unlike traditional training that teaches theory, GhostEye lets you discover how your team actually responds to sophisticated attacks.
🙏 The Ask
Think your human layer is locked down? Unsure?
The founders would love to learn more about your current strategy. Most organizations are surprised by how vulnerable they are to coordinated social engineering attacks – even with all traditional safeguards in place.
Launch Deal
GhostEye is offering a discounted 48-hour assessment across your entire organization. Give them a scope, and they'll create campaigns to target the most important people you know, and maybe the ones you don’t — a real "Human Pentest”.
Learn More
🌐 Visit ghosteye.ai to learn more.
🤝 Ready to test your defenses? Reach out to the founders via email here or fill out the form at ghosteye.ai/contact.
👣 Follow GhostEye on LinkedIn.
Simplify Startup Finances Today
Take the stress out of bookkeeping, taxes, and tax credits with Fondo’s all-in-one accounting platform built for startups. Start saving time and money with our expert-backed solutions.
Get Started