Skip to content
GoldAgent

Why GoldAgent

Specialist telephony security, made repeatable

GoldAgent concentrates automation on one thing: authorised PBX, SIP and VoIP security. That focus is what lets us combine the repeatability of automation with the credibility of human validation, at a price a specialist consultancy engagement rarely matches.

Request an Assessment

The value equation

Why automation changes the economics

We do not claim arbitrary savings. The argument is structural, and you can check it against your own numbers below.

Traditional specialist testing

Relies heavily on scarce analyst time, so depth and cost rise together and frequent re-testing is expensive.

Generic scanners

Run often and cheaply, but lack the telephony context to see dial-plan, trunk and toll-fraud risk.

Large autonomous platforms

Address huge enterprise attack surfaces and are priced and scoped for that scale.

GoldAgent concentrates automation specifically on authorised PBX, SIP and VoIP security. That focus is what supports specialist coverage, consistent methodology, faster reassessment and predictable service packages, without the overhead of a general enterprise platform or the analyst-time cost of a bespoke consultancy for every cycle.

The lifecycle

Discover, validate, prioritise, remediate, verify, assure

Every engagement follows the same outcome-led path. The last stage, Assure, is scheduled automated reassessment, operationally run and human-validated, not always-on real-time monitoring.

  1. 1

    Discover

    See what is exposed

    Identify the PBX, SIP and VoIP infrastructure reachable within your authorised scope, starting from the outside-in view an attacker has.

  2. 2

    Validate

    Confirm what is real

    A person confirms which findings are genuinely exploitable and, where authorised, demonstrates impact, so you act on evidence, not scanner noise.

  3. 3

    Prioritise

    Know what matters first

    Rank findings by severity, exploitability and business impact, with a risk score and an illustrative view of fraud exposure.

  4. 4

    Remediate

    Fix with clear guidance

    Each finding carries specific, actionable remediation your team can implement: patch, restrict, tighten or segment.

  5. 5

    Verify

    Prove it is closed

    Retest the remediated findings to confirm the weakness is genuinely gone and the fix introduced no new gap.

  6. 6

    Assure

    Keep it current

    Run the authorised checks on a schedule and diff each run against the last: new, resolved and unchanged findings tracked over time. Automated runs, human-validated findings.

The GoldAgent assessment-and-assurance timelineA one-off authorised assessment at the start, then the same authorised checks re-run on an agreed schedule and validated by a person each cycle, so evidence stays current. It depicts discrete scheduled cycles, not always-on monitoring.estate drifts · new issuesAssessAuthorisedpoint-in-time1Assure2Assure3Assure4AssureSame authorised checks · re-run on your cadence · human-validated
Assess once; Assure keeps it current. A point-in-time assessment is true on the day it runs. Assure re-runs the same authorised checks on an agreed schedule and a person validates each cycle, so drift and newly disclosed issues are caught. It is scheduled reassessment, not an always-on monitoring platform.

How we compare

Where GoldAgent fits against the alternatives

A fair, category-level comparison. Many organisations combine a broad scanner or pen test with specialist telephony assessment.

How GoldAgent compares with generic scanning, traditional penetration testing and general autonomous security platforms across telephony-security dimensions.
DimensionGeneric vulnerability scannerTraditional penetration testGeneral autonomous platformGoldAgent
PBX / SIP specialismDepth of telephony-specific coverage: SIP, trunks, dial-plan, AMI, toll fraud.
Repeatable, consistent methodSame checks run the same way each time, so results are comparable over time.
Human validation of findingsA person confirms findings are real and removes false positives before reporting.
Toll-fraud demonstrationEvidence of whether fraudulent outbound calling is genuinely possible, under agreed limits.
Dial-plan & routing reviewReviews the calling permissions where most telephony fraud risk actually lives.
Prioritised remediation guidance
Retest / verificationRe-checks remediated findings to confirm they are genuinely closed.
Recurring assuranceGoldAgent delivers scheduled, automated reassessment with historical change tracking; findings are human-validated. No live portal.
Machine-readable output (SARIF)Findings that flow into SIEM and security pipelines.
Low procurement complexity for SMEs
Suited to MSP / multi-site deliveryCan be packaged and delivered across many customer estates.

This compares categories of approach, not named companies. Each has legitimate strengths; many organisations combine a broad scanner or pen test with specialist telephony assessment.

Check it yourself

A transparent value calculator

Enter your own numbers. Every figure is arithmetic on your inputs, with every assumption shown. We invent no savings and make no forecast.

Your current approach

£3,000 / year

£3,000 per validation point, 1 per year

GoldAgent Assure (illustrative)

£1,290 / year

≈ £323 per validation point at 4 reassessments/year

Assumptions (all editable above)

Figures are arithmetic on the numbers you enter. GoldAgent invents no savings and makes no forecast.

A “validation point” is one assessment or scheduled reassessment. The Assure cadence shown is illustrative; your real cadence is agreed with you.

Any toll-fraud figure is your own estimate of exposure, not an observed or predicted loss.

Built for safe, repeatable testing

The safeguards behind every engagement

The engine is built so that testing stays authorised, safe and repeatable, and so results can be tracked over time and delivered under your brand.

  • Authorisation-gated

    Active modules will not run without a signed, in-scope authorisation, and a scope hash is stamped into every report.

  • Locked passive profile

    Between-run reviews use a profile that cannot invoke any active module, safe by construction, verified in the engine's own tests.

  • Scheduled reassessment

    Automated runs on your cadence, each diffed against the last for new, resolved and unchanged findings.

  • Human validation

    A person confirms findings before they reach you, so the report is signal, not raw output.

  • Machine-readable output

    HTML, JSON, CSV and SARIF, so findings flow into your SIEM and security pipelines.

  • Multi-tenant white-label

    Isolated workspaces and rebrandable reports let MSPs deliver assurance under their own brand.

Honest by default

What GoldAgent does not do

Trust in security is built as much on what a supplier refuses to claim as on what it promises. We are explicit about our limits.

  • No testing without written authorisation and an agreed scope
  • No testing of systems you do not own or are not authorised to test
  • No selling or retention of harvested credentials
  • No guarantee of complete security; no assessment can offer that
  • No fabricated accreditations, testimonials or client counts
  • No live SOC or customer portal we do not operate; assurance is scheduled, automated reassessment with human-validated findings

Find out exactly how exposed your phone system is

Request an authorised PBX, VoIP or SIP security assessment. We confirm scope and authorisation first, then show you what is exposed and what to fix.

Request an AssessmentSee a sample report

Testing is only performed against systems you own or are explicitly authorised to test.