Press Release · Cimento AI
Cimento AI Launches AutoPhish, Always-On Phishing Simulation Across Email, SMS, and Voice
Distributed by WebDozen · Originally issued via PRLog
SALT LAKE CITY - Nov. 2, 2026 — Cimento AI, the secure behavior management platform, today announced the general availability of AutoPhish, an always-on phishing simulation program that runs across email, SMS, and voice. AutoPhish replaces the hours security teams spend picking templates and scheduling campaigns with AI agents that do the hard work in the background, writing, sending, and teaching on their own, while administrators stay in control of difficulty, timing, and what is off-limits.
Phishing remains the most common way attackers get in, and social engineering now arrives as a text from "IT" or a phone call from someone who sounds like the CFO as often as it does in an inbox. Yet most phishing simulation tools still test only email, send the same lure to everyone, and leave the administrator to do the work. Employees learn to recognize a handful of recycled templates, warn the next desk over, and remain just as vulnerable to the real thing.
AutoPhish takes a different approach: AI agents do the hard work in the background, so the security team only sets the rules. During setup, an administrator tells it the company's industry and the outside vendors employees actually hear from. From then on, every person in scope receives a fresh, realistic lure each period, at a random time they cannot predict, built from those real tools and workflows. One employee may get a DocuSign request, another a Workday notice, another a forwarded expense report from a colleague. No two people get the same message, and the program runs over email, SMS, and voice so employees learn to spot social engineering wherever it shows up.
"Security teams did not sign up to be template librarians, and employees do not learn anything from clicking the same fake invoice for the third year running," said Zain Rizavi, CEO of Cimento AI. "AutoPhish does the writing, the scheduling, and the follow-up. The admin sets the guardrails and watches the failure rate fall. The employee gets a lesson on the exact message that fooled them, in the moment, instead of a training module next week."
Key capabilities
* A different lure for every person, every round. Lures are generated from the customer's own vendor list and organization, delivered at unpredictable times, and routed by department so engineering sees an AWS lure and finance sees a Ramp lure.
* Three channels, one program. Email, SMS, and voice simulations run under one set of guardrails and report to one dashboard.
* Guardrails administrators control. Test cadence, difficulty from Basic to Advanced, a sensitive-topics dial, and a never-use list. Lures about layoffs and bonuses are off by default.
* Teachable moments on the real message. An employee who clicks sees their own email with the warning signs marked: the fabricated urgency, the unusual request, the hidden link destination. Training is assigned automatically and tracked to completion.
* Human in the loop. Administrators preview every round before it sends, flag anything that is not a fit, skip a round, or pause the program with one click. Nothing sends until the admin turns it on.
* Results that prove progress. Failure rate, report-to-security rate, delivery, and reach on one screen, plus a learning curve that shows how each person improves from their first simulation to their fourth. Results feed the company's Cimento risk score.
* No rip and replace. AutoPhish runs alongside an existing awareness program, so teams can turn it on, compare, and migrate at their own pace. New hires are enrolled automatically.
Early customers in financial services, technology, and infrastructure have piloted AutoPhish ahead of general availability.
Availability
AutoPhish is available today to all Cimento AI customers as part of the Cimento platform. It is off by default and activated by each customer's administrator from the Phishing section of the Cimento admin console. Customers can request a guided setup session at https://cimento.ai/book-a-demo
About Cimento AI
Cimento AI is a secure behavior management platform that helps companies measure and reduce human risk. Cimento combines AI-generated phishing simulations across email, SMS, and voice with adaptive training, threat intelligence, and a company-wide risk score, so security teams can see where people are vulnerable and change it. Security teams at DigitalOcean, Together AI, Factory AI, Gemini, Exa AI and many more use Cimento. The company was founded by a team from Cloudflare's Special Projects group and is backed by Bowery Capital and Indie VC. Learn more at https://cimento.ai
Contact
Zain Rizavi, CEO, Cimento AI
***@cimento.aiEnd
Phishing remains the most common way attackers get in, and social engineering now arrives as a text from "IT" or a phone call from someone who sounds like the CFO as often as it does in an inbox. Yet most phishing simulation tools still test only email, send the same lure to everyone, and leave the administrator to do the work. Employees learn to recognize a handful of recycled templates, warn the next desk over, and remain just as vulnerable to the real thing.
AutoPhish takes a different approach: AI agents do the hard work in the background, so the security team only sets the rules. During setup, an administrator tells it the company's industry and the outside vendors employees actually hear from. From then on, every person in scope receives a fresh, realistic lure each period, at a random time they cannot predict, built from those real tools and workflows. One employee may get a DocuSign request, another a Workday notice, another a forwarded expense report from a colleague. No two people get the same message, and the program runs over email, SMS, and voice so employees learn to spot social engineering wherever it shows up.
"Security teams did not sign up to be template librarians, and employees do not learn anything from clicking the same fake invoice for the third year running," said Zain Rizavi, CEO of Cimento AI. "AutoPhish does the writing, the scheduling, and the follow-up. The admin sets the guardrails and watches the failure rate fall. The employee gets a lesson on the exact message that fooled them, in the moment, instead of a training module next week."
Key capabilities
* A different lure for every person, every round. Lures are generated from the customer's own vendor list and organization, delivered at unpredictable times, and routed by department so engineering sees an AWS lure and finance sees a Ramp lure.
* Three channels, one program. Email, SMS, and voice simulations run under one set of guardrails and report to one dashboard.
* Guardrails administrators control. Test cadence, difficulty from Basic to Advanced, a sensitive-topics dial, and a never-use list. Lures about layoffs and bonuses are off by default.
* Teachable moments on the real message. An employee who clicks sees their own email with the warning signs marked: the fabricated urgency, the unusual request, the hidden link destination. Training is assigned automatically and tracked to completion.
* Human in the loop. Administrators preview every round before it sends, flag anything that is not a fit, skip a round, or pause the program with one click. Nothing sends until the admin turns it on.
* Results that prove progress. Failure rate, report-to-security rate, delivery, and reach on one screen, plus a learning curve that shows how each person improves from their first simulation to their fourth. Results feed the company's Cimento risk score.
* No rip and replace. AutoPhish runs alongside an existing awareness program, so teams can turn it on, compare, and migrate at their own pace. New hires are enrolled automatically.
Early customers in financial services, technology, and infrastructure have piloted AutoPhish ahead of general availability.
Availability
AutoPhish is available today to all Cimento AI customers as part of the Cimento platform. It is off by default and activated by each customer's administrator from the Phishing section of the Cimento admin console. Customers can request a guided setup session at https://cimento.ai/book-a-demo
About Cimento AI
Cimento AI is a secure behavior management platform that helps companies measure and reduce human risk. Cimento combines AI-generated phishing simulations across email, SMS, and voice with adaptive training, threat intelligence, and a company-wide risk score, so security teams can see where people are vulnerable and change it. Security teams at DigitalOcean, Together AI, Factory AI, Gemini, Exa AI and many more use Cimento. The company was founded by a team from Cloudflare's Special Projects group and is backed by Bowery Capital and Indie VC. Learn more at https://cimento.ai
Contact
Zain Rizavi, CEO, Cimento AI
***@cimento.aiEnd