Secure Voice™

Contact center voice security with controls you choose, order and tune

Secure Voice™ screens every inbound and outbound call through a pipeline of controls. When a control trips, it emits a signal and your action runs: allow, block, redirect or alert.

Secure Voice™ dashboard
Live
Contact center tenant
Threats active now
Single Source TDoS
14:12
Own DID Range Detection
14:09
Threats, 15 / 60 min
Inbound
12 / 41
Outbound
3 / 9
Remote worker
1 / 4
Decisions, last 15 min
Allowed 1,204 Blocked 87 Redirected 19
Node health
Defender DC
Healthy
Defender DR
Healthy
Web Admin
Healthy
CPU 21% · Mem 38% · Up 42d
Illustrative demo data
Works with any SBC over SIP, with a native REST API for your contact center platform
Any SBC
AWS Connect
Genesys Cloud
Any CCaaS provider

Voice fraud is high-volume and increasingly AI-driven

52.5B

robocalls to U.S. consumers in 2025

YouMail Robocall Index, Jan 2026
$12.5B

estimated lost to contact center fraud in 2024

Pindrop, 2025 Voice Intelligence + Security Report
1,300%+

rise in deepfake fraud attempts in 2024

Pindrop, 2025 Voice Intelligence + Security Report
1 in 599

contact center calls was fraudulent

Pindrop, analysis of 1.2 billion calls, Nov 2025
Attack patterns change constantly. Secure Voice™ lets your team add, reorder and tune controls as they do.

Every control emits a signal. You decide the action.

Step 1

Control detects

A control in the pipeline evaluates the call.

Step 2

Signal emitted

When the control trips, it emits a signal.

Step 3

Action block

An action block catches the signal and runs your response.

Outcome
Allow
Block
Redirect
Alert

Or any response you define.

Block and redirect action blocks ship ready to use. Write your own action block to catch any signal and do whatever your policy requires.

Choose the controls, set their order, tune how each works

1

Move controls up or down to set the order they run on every call.

2

Each control shows its ID and a plain-language description.

3

Open the reference data behind a control.

4

Configure each control’s thresholds and actions, or remove it.

5

Set the default action, add controls from the library, and test before saving.

Inbound pipeline
Default: Allow
Runs top to bottom on every inbound call
1
Allow List
IN-03
Allow
2
Deny List
IN-04
Block
3
PAI Validator
IN-13
Block
4
Own DID Range Detection
IN-15
Block
5
Single Source TDoS
IN-09
Block
6
FCC Complaint Lookup
IN-17
Redirect
+ Add control
Test call
Save
Single Source TDoS · settings
Call threshold
20 calls
Window
60 s
Action TTL
15 min
Action on detection
Block
Screening alert
On
Illustrative demo data
Outbound pipeline
Default: Allow
Evaluates the called number
1
Allow List
OUT-03
Allow
2
Deny List
OUT-04
Block
3
Time of Day Restrictions
OUT-05
Redirect
4
Geo Fence
OUT-06
Block
5
Number Type Check
OUT-09
Block
6
FATF Country screening
OUT-10
Block
Illustrative demo data

A separate pipeline for outbound calls

Outbound controls evaluate the called number, with their own order and default action. Use them to stop toll fraud, keep calls inside the allowed calling window for each destination country, and block calls to high-risk countries.

Run a test call through any pipeline

Check how a pipeline handles a call before your changes go live.

1

Enter the from and to numbers, direction, caller IP, P-Asserted-Identity and TN-Validation status.

2

Run the test call against the tenant’s pipeline.

3

See the decision, the control that made it, and how the tenant was identified.

Test call
Contact center tenant
From
+1 (469) 555-0142
To
+1 (214) 555-0100
Direction
Inbound
Caller IP
203.0.113.24
P-Asserted-Identity
Matches From
TN-Validation
Failed
Decision
Blocked
Control: AT&T Verstat
Tenant identified by called number
Illustrative demo data

Score every caller, then decide when to act

Allow, Flag and Block bands for the Scam Score Decision control.

Observe-only mode: every call’s zone is classified and logged, with no automatic action.

A 1, 2 or 3 month decay window sets how much signal history each score uses.

Scam Score Decision
Caller reputation settings
Score bands
Allow
0–39
Flag
40–69
Block
70–100
Observe-only mode
Classify and log every call, no automatic action
Off
Decay window
Signal history each score uses
1 mo
2 mo
3 mo
Illustrative demo data

Manage the data behind your controls

FCC and FTC complaints

Search complaint counts by exact number or prefix, with sync and expiry time for every record. This data backs the FCC Complaint Lookup control.

Your own numbers

Register the number ranges you own, singly or by CSV upload. Inbound calls that present one of them as caller ID are caught.

FATF countries

The gray-list and black-list table used by the inbound and outbound FATF controls.

Stop spam and AI bots before they reach an agent

Suspicious calls are redirected to the Voice Bot Screener, which answers the call and profiles the caller to separate people from automated and AI-driven callers.

01

Answer

The suspicious call is redirected to the Voice Bot Screener, which answers it.

02

Profile

The caller is profiled to separate people from automated and AI-driven callers.

03

Allow

Allowed callers are connected to the number they dialed. Denied calls are rejected.

Optional add-on.

Run every business unit as its own tenant

Handle each department or customer separately, each with its own admin, reporting, controls and pipeline, on one shared platform.

Tenant A
Admin
Reporting
Controls
Pipeline
Tenant B
Admin
Reporting
Controls
Pipeline
Tenant C
Admin
Reporting
Controls
Pipeline
Secure Voice™
One deployment, shared platform

Native REST API for the contact center platforms you run

Connect Secure Voice™ with AWS Connect, Genesys Cloud and any other CCaaS provider.

Works with any SBC over SIP.

Email notifications and dashboard alerts.

Secure Voice™
REST API
AWS Connect
Genesys Cloud
Any CCaaS provider

See threats, decisions and node health

Threats active now, with type and time.

Inbound, outbound and remote worker threats over 15 and 60 minutes.

Calls allowed, blocked and redirected over 1, 15 and 60 minutes.

Status, version, CPU, memory and uptime for every node.

Reminders, such as when the FATF gray and black lists are due for review.

Trace every decision to its control

On demand

Summary and detail reports for screening, remote worker, CDR, blocked IPs, Voice Bot Screener and caller reputation, plus a full audit log.

Daily email

A report covering the last 24 hours. Pick the report groups, recipients, send time and timezone.

Decision trace

Filter calls by time, number, correlator ID, direction and decision. Expand a call to see every pipeline stage, its result and a plain-language detail.

Allow List
Pass
PAI Validator
Pass
Single Source TDoS
Tripped

Deploy where your security policy requires

Option 1

On-prem

100% on-premises, inside your own network.

Option 2

Private cloud

Run in the private cloud you already operate.

Option 3

Public cloud

Run in the public cloud.

33 controls across four call surfaces

17

Inbound

Spam and TDoS, spoofing, number validity, geographic risk, FATF, toll fraud

11

Outbound

Toll fraud, time-of-day compliance, geographic risk, FATF, number validity

3

Remote worker

Brute force, enumeration, impossible travel

2

CDR

Low-duration and dead-air call campaigns

Inbound and outbound controls check SIP signaling on every call. Remote worker and CDR controls detect attacks after the event, from SBC registration logs and CDR files.

Why carrier filters and SBC rules aren't enough

Carrier filters stop known bad numbers. SBC rules do only what they were set up to do. Secure Voice™ catches the attacks that get past both.

Carrier filters
SBC rules
Other solutions in the market
Secure Voice™
Scores every caller and keeps that score over time
Choose, order and tune security controls
Separate inbound and outbound pipelines
Separate thresholds for high- and low-intensity attacks
Your own action on every signal
Answers and profiles suspected AI bots
Detects remote worker registration attacks
Test a call before changes go live

Scores every caller and keeps that score over time

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Choose, order and tune security controls

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Separate inbound and outbound pipelines

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Separate thresholds for high- and low-intensity attacks

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Your own action on every signal

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Answers and profiles suspected AI bots

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Detects remote worker registration attacks

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Test a call before changes go live

Secure Voice™
Carrier filters
SBC rules
Other solutions in the market

Typical capabilities by category. Individual vendors vary.

Key terms

Control

A check that evaluates each call, such as Geo Fence, PAI Validator or Single Source TDoS.

Pipeline

The ordered list of controls a call runs through. Inbound and outbound calls each have their own.

Action block

The response that runs when a control emits a signal: allow, block, redirect, alert or your own logic.

TDoS

Telephony denial of service: a flood of calls that ties up lines so real callers can’t get through.

FATF gray and black lists

Countries the Financial Action Task Force flags for weak controls against money laundering and terrorist financing.

Secure Voice™ questions

Voice security for contact centers. It screens inbound and outbound calls through a pipeline of controls you choose, order and tune, and runs your action when a control trips.

Yes. Add controls from a library of 33, set the order they run, tune each control’s thresholds and actions, and test a call before saving.

It works with any SBC over SIP, and its native REST API connects with AWS Connect, Genesys Cloud and other CCaaS providers.

Suspicious calls are redirected to the screener, which answers the call and profiles the caller. People are connected to the number they dialed; automated and AI-driven callers are rejected.

Yes. Each tenant has its own admin, reporting, controls and pipeline on one shared platform.

On-demand summary and detail reports, a daily email, a full audit log, and a per-call trace showing every pipeline stage and its result.

On-prem, in your private cloud or in public cloud.

See how Secure Voice™ would screen your calls

Book a demo and a specialist will walk you through the pipeline, controls and reports on your platform.