Doppel Email Security is now generally available
The agentic email security solution that empowers you to fight back against social engineering attacks. Detection isn't enough. Disruption is the difference.
Applied Cyber
Applied Cyber is Doppel's team of cybersecurity experts. They shape what we build, teach our AI how experts think, and bring that expertise to every solution: the takedowns that remove attacker infrastructure, the analysis that stops email attacks, and the simulations that test your people.
The expertise
Every person on the team has spent years on the offensive or defensive side of social engineering attacks. Here is what that expertise looks like in practice.
First-place DEF CON finishers and former red teamers with 50,000+ live vishing calls, millions of phishing and smishing messages, and deepfake impersonations run against senior executives across federal, Fortune 500, and financial services environments. They don’t study how people get targeted. They’ve spent their careers doing the targeting.
Practitioners who break through cloaking built to defeat automated detection and pivot across domains, social platforms, code repositories, and passive DNS to connect the signals scanners miss. Every evasion they expose becomes a detection the platform can’t be fooled by again.
Practitioners and product leaders who have spent decades dissecting phishing and business email compromise down to the infrastructure, identity, behavioral, and messaging signals that give attacks away. They know why attacks bypass existing controls, and they’ve built the detection that stops them.
Leaders with decades across DNS abuse, trust and safety, and internet policy, from registrars and TLD operators to ICANN and Capitol Hill. They do more than win individual takedowns. They shape abuse policy and open escalation paths that disrupt whole categories of malicious activity at internet scale.
Why it matters
Doppel's AI is trained and measured against how expert practitioners solve the problem. The platform applies that judgment at machine speed; the experts take on the cases it hasn't solved yet, then make the answer repeatable. They stay close to customers' hardest problems so what they learn flows back into the product.
“We had other vendors who said, "here is this thing, now go use it." Having a trusted partner like Doppel is reassuring for me and leadership in order to deliver on value.”
— Head of Security, Fortune 100 financial services
The learning loop
An expert who uncovers a cloaked domain, completes a takedown, or builds a phishing simulation has produced one result. That is one-to-one leverage, and no team is large enough for it to be the model.
Applied Cyber works differently. When an expert makes a call, the team captures why, not just what. That reasoning becomes labels, rubrics, and evaluations that Doppel’s models and agents are continuously tested against. The expert’s judgment becomes the platform’s judgment.
Agents analyze misses and false positives, flag labeling inconsistencies, and turn difficult production cases into new evaluations. Experts rule on the hard ones. The platform learns the ruling.
One attack chain
The infrastructure and content attackers build
Domains, social accounts, apps, and the cloaking meant to hide them. Expert takedown work here trains the platform to act on lookalike infrastructure faster.
The messages and attacks they send
Phishing and BEC broken down to the signals that expose them. Expert analysis here becomes detection logic the platform applies to every inbox.
The people they target and how they respond
Who gets targeted, with what pretext, and what happens next. Expert-built simulations here calibrate how the platform measures and reduces human risk.
The infrastructure, the message, and the person are pieces of one attack. All three solutions run on one Superintelligence Layer, shaped by the Applied Cyber team, so expert judgment encoded on one surface makes the platform more accurate on the other two.
What it means for you
Applied Cyber defines what best-in-class looks like in each domain and validates that what Doppel ships meets the bar of sophisticated practitioners.
The team creates the ground truth Doppel’s models learn from and are evaluated against. Problems that once required expert intervention become capabilities the platform handles on its own.
Direct relationships with hosting providers, registrars, and email and social platforms turn one-off escalations into enforcement at scale. In-house experts and direct provider relationships and escalations including PIR, Cloudflare, TikTok.
Meet the experts
Every area Doppel defends has a named expert accountable for its quality bar, and when Doppel enters a new domain, Applied Cyber sets that bar first.

Applied Cyber leadership
Senior Director of Applied Cyber

DNS abuse and internet policy
Infrastructure Partnerships Leader

Email security and detection engineering
Applied Cyber Email Security Leader

Digital Risk Protection detections
DRP Detections Leader

Human Risk Management
Human Risk Management Leader

Threat disruption and takedowns
Applied Cyber Takedowns Leader

Human data and AI evaluations
Applied Cyber Labeling Leader
Deepfakes and synthetic media
Human Risk Management Practitioner

Social engineering simulations
Human Risk Management Lead

Vishing and social engineering
Human Risk Management Practitioner
Threat hunting and detection engineering
Applied Cyber Detections Leader

Applied Cyber
Applied Cyber Expert

Trust and safety partnerships
Senior Infrastructure Partnerships Lead

Takedown operations and escalations
Senior Infrastructure Partnerships Lead

Trust and safety escalations
Infrastructure Partnerships Lead