GhostEye

GhostEye is a social engineering testing platform for security teams. It runs authorized attack simulations against named employees across voice, email, SMS, chat and video, generating each attempt per person instead of per campaign, then names the specific control that failed. The vendor categorizes it as adversarial exposure validation. Its first product is called Beacon. The vendor describes it as running the social engineering that would have worked against an organization and showing where it landed. It follows the paths those attempts open into company systems and evaluates whether the organization's detections and endpoint protection catch what gets through. The same pretext can be tested again afterward so a team can show that a gap has been closed. A second area on the site is labeled Labs. It is built for security leaders, awareness and red team functions that want realistic, role specific exercises in place of generic phishing templates. All testing is run by arrangement with the customer against its own people and systems. The vendor offers a walkthrough of how an engagement runs before purchase. Pricing is not listed. The vendor states that it consists of an annual platform fee plus a tier based on headcount, so cost follows the size of the population tested rather than a per seat license. A custom quote is requested through a form that takes a work email, name, company and website.