Alexandre Esser

Alexandre Esser

About Alexandre Esser

Co-founder & CTO 👨‍💻
Social-engineering expert and engineer with 15+ years building technology and leading engineering teams. As CTO, he leads the development of Arsen's platform, the most advanced attack simulations, from vishing to deepfakes, alongside an interactive security-awareness training platform. He writes about how modern social engineering really works, and how to stop it.

Read our editorial standards and transparency page for editorial and corrections information.

Alexandre Esser Latest Posts

Vishing voice cloning: run phone simulations in a voice your employees know

Vishing voice cloning: run phone simulations in a voice your employees know
Alexandre Esser
Product

Record your own voice in Arsen, give it to a vishing caller, and build goal-driven calls, phone-to-phish follow-ups included, from one sentence that states the goal.

Arsen MCP: query your phishing and awareness training data from your AI assistant

Arsen MCP: query your phishing and awareness training data from your AI assistant
Alexandre Esser
Product

Connect your AI assistant to Arsen and analyze phishing simulation campaigns, awareness training and training programs in plain language, with read-only access to your own data.

Human risk dashboard: read your risk and act on each campaign result

Human risk dashboard: read your risk and act on each campaign result
Alexandre Esser
Product

Read your human risk in one sentence, see which groups and techniques to address first, and turn each phishing campaign result into a follow-up for the people concerned.

Employee Security Score: measure each employee's actual risk from recent behavior

Employee Security Score: measure each employee's actual risk from recent behavior
Alexandre Esser
Product

Read each employee's security score as a measure of actual risk, weighted by recent behavior, reporting, scenario difficulty and training completion.

Interactive Awareness Lessons: train employees by practising real attack situations

Interactive Awareness Lessons: train employees by practising real attack situations
Alexandre Esser
Product

Give employees awareness lessons where they inspect phishing emails, take vishing calls, hear a voice deepfake and order incident steps, instead of reading text and picking one answer.

Phishing Email Import: build phishing scenarios from real-world emails

Phishing Email Import: build phishing scenarios from real-world emails
Alexandre Esser
Product

Create the email of a custom phishing scenario from a real-world email, by uploading an email file or forwarding the message to Arsen, then review and edit the draft before use.

Deepfake executive fraud simulation: test your team against a fake executive on a live video call

Deepfake executive fraud simulation: test your team against a fake executive on a live video call
Alexandre Esser
Product

Attackers can now stage ultra-realistic video calls using deepfakes of executives or colleagues to trick employees into granting access to internal systems and sensitive data. Arsen Deepfake Video...

BEC Simulation: run phishing simulations from your own organization domain

BEC Simulation: run phishing simulations from your own organization domain
Alexandre Esser
Product

Build custom phishing scenarios sent from your own organization domain and measure how employees verify sensitive requests, the behavior business email compromise relies on.

We're Building the Future of Human Risk Management, and We're Hiring

We're Building the Future of Human Risk Management, and We're Hiring
Alexandre Esser
Product

Most breaches start with a human mistake. Arsen is building the tools to fix that and hiring the team to accelerate. Here's our product vision and what we're looking for.

Introducing the New Arsen Cyber Awareness Training Platform

Introducing the New Arsen Cyber Awareness Training Platform
Alexandre Esser
Product

For the past few weeks, we’ve been gradually deploying a redesigned security awareness training module, progressively available to all customers. We have designed our new training module...

Google Safe Browsing: How to Recover from a Domain Flagging

Google Safe Browsing: How to Recover from a Domain Flagging
Alexandre Esser
Sec Ops

Phishing simulation domains can get flagged by Google Safe Browsing even when used for legitimate security testing. Here's how to recover flagged domains fast and keep your awareness campaigns...

Google Safe Browsing: How to Stay Invisible to Google's Bots

Google Safe Browsing: How to Stay Invisible to Google's Bots
Alexandre Esser
Sec Ops

Google Safe Browsing protects billions of devices — but it can disrupt authorized phishing simulations. Discover multi-layered anti-crawling strategies including IP filtering, CAPTCHA, time-based...

View more