Put HRM on Autopilot: Introducing Doppel's AI Managed Service

Running a security awareness program has always meant making a long list of ongoing decisions. What should this quarter's simulations look like? Which channels did I test last month, and should I test this month? How challenging should the next simulations be, and how quickly should we ramp them up? Is the current mix of themes and channels still relevant to what employees are actually seeing? Every one of those calls falls on a security team, campaign after campaign, indefinitely.

That model was manageable when programs were simple. It isn't anymore. Attackers now move across inboxes, meetings, collaboration tools, and increasingly creative pretexts, which means the "right" simulation to run this month might look nothing like the one that worked last month. Keeping a program current requires constant attention, and most security teams don't have a dedicated person whose full-time job is tuning a training program. They have a long list of priorities, and SAT is one of many.

The result is a familiar pattern: programs get set up, run for a while, and then quietly go stale— not because the team stopped caring, but because nobody has the bandwidth to keep making all those decisions forever.

We don't think that tradeoff should exist. So today, we're introducing AI Managed Service: a fully autonomous way to run your entire security awareness program, powered by Doppel's agentic AI.

From Configuring Campaigns to Setting Direction

AI Managed Service changes what it means to set up a program. Instead of building individual campaigns, you describe your goals once: your desired end state, specific concerns, and any gaps you know exist in your current program. You can add guardrails, like starting easy and increasing difficulty over time, or capping how many simulations run per quarter. If you want certain groups prioritized (say, making sure finance is your best-prepared team), you can specify that, too.

From there, AI Managed Service takes over. It uses the parameters you provided, coupled with OSINT-backed insights into your company’s tech stack, organizational structure, and more to build a full human risk management program, customized to every user and role.

It decides which scenarios, themes, and channels actually make sense for your organization, whether that's a Canva email lure or a Figma one, an Azure SMS pretext or an AWS one, so you're never stuck guessing what to simulate next or where to run it. It schedules and runs campaigns across channels on an ongoing basis, and keeps adjusting based on how your employees respond, plus real-world signals from Phishing Triage, and Doppel's threat intelligence. In practice, that means a program that can run itself for years off a single setup conversation.

This isn't automation that still needs a human checking in every few weeks to decide what's next. It's genuine autonomy that lets lean security teams run a program with the sophistication of a much larger one, without the ongoing lift.

Built for Teams Who Don't Have Time to Spare

AI Managed Service is available across Doppel's Human Risk Management customer base, but it's especially built for teams that don't have a full-time person dedicated to running SAT, common at SMB and mid-market organizations, and just as common inside larger enterprises where security teams are stretched thin across a dozen priorities.

For those teams, the value isn't just time saved, though that matters. It's confidence that the program stays relevant even when no one has looked at it in weeks, because it's still learning, still adjusting, and still testing employees against the threats that are actually targeting your organization right now.

One More Thing: ClickFix Simulations Are Here

Speaking of threats that are actually targeting your organization right now, we recently shipped support for ClickFix, a real-world attack technique that's been gaining traction in the wild. Instead of a malicious link or attachment, targets land on a fake "verify you're human" page and are social-engineered into copying and running a command themselves.

Doppel's ClickFix simulations recreate that exact flow safely: the command employees are guided to run is a harmless beacon that only records the interaction, with nothing that can actually touch the machine. It's tracked with the same rigor as any other attack type (i.e., command execution counts toward risk scoring and can trigger remediation training automatically), so you get full visibility into a technique most training programs haven't caught up to yet.

It's a good example of the broader point: attacker behavior keeps shifting, and your program needs to keep pace. That's exactly the gap AI Managed Service is built to close.

AI Managed Service is available today. To see it in action, contact our team today.