Contact center voice security with controls you choose, order and tune
Secure Voice™ screens every inbound and outbound call through a pipeline of controls. When a control trips, it emits a signal and your action runs: allow, block, redirect or alert.
Attack patterns change constantly. Secure Voice™ lets your team add, reorder and tune controls as they do.
Every control emits a signal. You decide the action.
Step 1
Control detects
A control in the pipeline evaluates the call.
Step 2
Signal emitted
When the control trips, it emits a signal.
Step 3
Action block
An action block catches the signal and runs your response.
Outcome
Allow
Block
Redirect
Alert
Or any response you define.
Block and redirect action blocks ship ready to use. Write your own action block to catch any signal and do whatever your policy requires.
Choose the controls, set their order, tune how each works
1
Move controls up or down to set the order they run on every call.
2
Each control shows its ID and a plain-language description.
3
Open the reference data behind a control.
4
Configure each control’s thresholds and actions, or remove it.
5
Set the default action, add controls from the library, and test before saving.
Inbound pipeline
Default: Allow
Runs top to bottom on every inbound call
1
Allow List
IN-03
Allow
2
Deny List
IN-04
Block
3
PAI Validator
IN-13
Block
4
Own DID Range Detection
IN-15
Block
5
Single Source TDoS
IN-09
Block
6
FCC Complaint Lookup
IN-17
Redirect
+ Add control
Test call
Save
Single Source TDoS · settings
Call threshold
20 calls
Window
60 s
Action TTL
15 min
Action on detection
Block
Screening alert
On
Illustrative demo data
Outbound pipeline
Default: Allow
Evaluates the called number
1
Allow List
OUT-03
Allow
2
Deny List
OUT-04
Block
3
Time of Day Restrictions
OUT-05
Redirect
4
Geo Fence
OUT-06
Block
5
Number Type Check
OUT-09
Block
6
FATF Country screening
OUT-10
Block
Illustrative demo data
A separate pipeline for outbound calls
Outbound controls evaluate the called number, with their own order and default action. Use them to stop toll fraud, keep calls inside the allowed calling window for each destination country, and block calls to high-risk countries.
Run a test call through any pipeline
Check how a pipeline handles a call before your changes go live.
1
Enter the from and to numbers, direction, caller IP, P-Asserted-Identity and TN-Validation status.
2
Run the test call against the tenant’s pipeline.
3
See the decision, the control that made it, and how the tenant was identified.
Test call
Contact center tenant
From
+1 (469) 555-0142
To
+1 (214) 555-0100
Direction
Inbound
Caller IP
203.0.113.24
P-Asserted-Identity
Matches From
TN-Validation
Failed
Decision
Blocked
Control: AT&T Verstat
Tenant identified by called number
Illustrative demo data
Score every caller, then decide when to act
Allow, Flag and Block bands for the Scam Score Decision control.
Observe-only mode: every call’s zone is classified and logged, with no automatic action.
A 1, 2 or 3 month decay window sets how much signal history each score uses.
Scam Score Decision
Caller reputation settings
Score bands
Allow
0–39
Flag
40–69
Block
70–100
Observe-only mode
Classify and log every call, no automatic action
Off
Decay window
Signal history each score uses
1 mo
2 mo
3 mo
Illustrative demo data
Manage the data behind your controls
FCC and FTC complaints
Search complaint counts by exact number or prefix, with sync and expiry time for every record. This data backs the FCC Complaint Lookup control.
Your own numbers
Register the number ranges you own, singly or by CSV upload. Inbound calls that present one of them as caller ID are caught.
FATF countries
The gray-list and black-list table used by the inbound and outbound FATF controls.
Stop spam and AI bots before they reach an agent
Suspicious calls are redirected to the Voice Bot Screener, which answers the call and profiles the caller to separate people from automated and AI-driven callers.
01
Answer
The suspicious call is redirected to the Voice Bot Screener, which answers it.
02
Profile
The caller is profiled to separate people from automated and AI-driven callers.
03
Allow
Allowed callers are connected to the number they dialed. Denied calls are rejected.
Optional add-on.
Run every business unit as its own tenant
Handle each department or customer separately, each with its own admin, reporting, controls and pipeline, on one shared platform.
Tenant A
Admin
Reporting
Controls
Pipeline
Tenant B
Admin
Reporting
Controls
Pipeline
Tenant C
Admin
Reporting
Controls
Pipeline
Secure Voice™
One deployment, shared platform
Native REST API for the contact center platforms you run
Connect Secure Voice™ with AWS Connect, Genesys Cloud and any other CCaaS provider.
Works with any SBC over SIP.
Email notifications and dashboard alerts.
Secure Voice™
REST API
AWS Connect
Genesys Cloud
Any CCaaS provider
See threats, decisions and node health
Threats active now, with type and time.
Inbound, outbound and remote worker threats over 15 and 60 minutes.
Calls allowed, blocked and redirected over 1, 15 and 60 minutes.
Status, version, CPU, memory and uptime for every node.
Reminders, such as when the FATF gray and black lists are due for review.
Trace every decision to its control
On demand
Summary and detail reports for screening, remote worker, CDR, blocked IPs, Voice Bot Screener and caller reputation, plus a full audit log.
Daily email
A report covering the last 24 hours. Pick the report groups, recipients, send time and timezone.
Decision trace
Filter calls by time, number, correlator ID, direction and decision. Expand a call to see every pipeline stage, its result and a plain-language detail.
Allow List
Pass
PAI Validator
Pass
Single Source TDoS
Tripped
Deploy where your security policy requires
Option 1
On-prem
100% on-premises, inside your own network.
Option 2
Private cloud
Run in the private cloud you already operate.
Option 3
Public cloud
Run in the public cloud.
33 controls across four call surfaces
17
Inbound
Spam and TDoS, spoofing, number validity, geographic risk, FATF, toll fraud
11
Outbound
Toll fraud, time-of-day compliance, geographic risk, FATF, number validity
3
Remote worker
Brute force, enumeration, impossible travel
2
CDR
Low-duration and dead-air call campaigns
Inbound and outbound controls check SIP signaling on every call. Remote worker and CDR controls detect attacks after the event, from SBC registration logs and CDR files.
Why carrier filters and SBC rules aren't enough
Carrier filters stop known bad numbers. SBC rules do only what they were set up to do. Secure Voice™ catches the attacks that get past both.
Carrier filters
SBC rules
Other solutions in the market
Secure Voice™
Scores every caller and keeps that score over time
Choose, order and tune security controls
Separate inbound and outbound pipelines
Separate thresholds for high- and low-intensity attacks
Your own action on every signal
Answers and profiles suspected AI bots
Detects remote worker registration attacks
Test a call before changes go live
Scores every caller and keeps that score over time
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Choose, order and tune security controls
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Separate inbound and outbound pipelines
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Separate thresholds for high- and low-intensity attacks
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Your own action on every signal
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Answers and profiles suspected AI bots
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Detects remote worker registration attacks
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Test a call before changes go live
Secure Voice™
Carrier filters
SBC rules
Other solutions in the market
Typical capabilities by category. Individual vendors vary.
Voice security for contact centers. It screens inbound and outbound calls through a pipeline of controls you choose, order and tune, and runs your action when a control trips.
Suspicious calls are redirected to the screener, which answers the call and profiles the caller. People are connected to the number they dialed; automated and AI-driven callers are rejected.