Birbal AI

Khafeer · خفير · Security awareness

Phishing simulation and security awareness training, in Arabic and English, hosted in the UAE.

Khafeer sends your staff realistic but harmless phishing emails, QR codes and AI voice calls, teaches the person who clicks in the same minute, and shows leadership which departments are at risk and whether that risk is falling.

Book a Khafeer demo See how it works
  • Email, QR-code and AI voice simulations
  • Training in Arabic and English
  • Hosted in the UAE or on your servers

Khafeer · Human risk

UAE-hosted

Risk index

38

down 12 points

Click rate

11%

Report rate

64%

  • Invoice lure · emailAll staff · sent 2 days ago11% clicked
  • MFA reset · QR codeIT department6% clicked
  • Executive call · AI voiceLeadership · in 3 daysScheduled
Teachable moment sent3-minute refresher for everyone who clickedTraining
Illustrative screen with sample data

Authorized vendor to

  • Ministry of Finance
  • Ministry of Interior
  • DGE Abu Dhabi
  • Etihad Aviation
  • EDGE Group

Delivered for

  • Hindustan Unilever
  • Nokia
  • Linde
  • USA Today
  • JSL

Procurement-ready

  • Emirati national company
  • National ICV certificate
  • Abu Dhabi Government Procurement Gate
  • UAE Ministry of Finance, federal procurement
  • Registered ADNOC vendor

Product tour

Khafeer in two and a half minutes

The risk dashboard, a phishing simulation from launch to report, what happens when someone clicks, training and the learner portal, AI voice phishing, Khafeer AI and reports.

Filmed in the Khafeer demo with sample data.Watch it in Arabic

Why it matters

Most attacks start with a person, not a server

A convincing email or phone call gets past firewalls. Annual slide-deck training does not change what people do when it arrives.

Training nobody remembers

A yearly course is forgotten in weeks, and it never shows who would actually click.

Voice attacks are here

Attackers now clone a manager's voice on the phone. Email-only testing does not prepare staff for it.

English-only content

Imported platforms offer little Arabic and no local context, so much of the workforce is left out.

What Khafeer does

Test, teach and measure in one platform

Phishing simulations

Simulated phishing emails from approved templates in Arabic and English, sent to everyone or to one department.

QR-code and voice phishing

QR-code lures and AI voice calls in Emirati Arabic, Modern Standard Arabic and English, built on our voice agent Nida.

Campaign builder

Choose the attack type, the template, the audience and the schedule; an approver signs off before anything is sent.

Teachable moments

Someone who clicks sees at once what gave the message away, then gets a three-minute refresher.

Learner portal

Short modules, quizzes, videos and posters for every employee, with progress and streaks.

Human risk index

One score for the organisation and each department, built from click rates, report rates and training completion.

Report button

Staff report suspicious emails from Outlook with one click, and real reports are forwarded to your SOC.

Reports for management

Campaign reports, risk trends by department and evidence for auditors, ready to export.

Fits your Microsoft setup

Single sign-on with Microsoft Entra ID and multi-factor authentication, and automatic user sync.

Sample lessons

Two-minute lessons in both languages

Two lessons from the Awareness Essentials series. Each comes in British English and Gulf Arabic, with captions, and is assigned automatically to whoever needs a refresher.

  • Spot the phish: five signs of a phishing email
  • Text, chat and call scams

Shown with a sample organisation name.

How it works

From first simulation to a falling risk score

  1. 01

    Connect

    Connect your directory so users and departments stay up to date, and add the report button to Outlook.

  2. 02

    Simulate

    Run a baseline campaign by email, QR code or voice to see where you stand today.

  3. 03

    Teach

    People who fall for a simulation get short training straight away; everyone gets regular modules.

  4. 04

    Measure

    Watch click rates fall and report rates rise, by department, and show the trend to leadership.

Who it’s for

Built for organisations with Arabic and English workforces

Government entities

Entities that must run awareness programmes and keep employee data in the UAE.

Banks and healthcare

Regulated organisations that have to show auditors how staff are trained and tested.

Security teams

CISOs and SOC teams who want measured behaviour instead of course-completion figures.

Licensing

License Khafeer on your servers or in the cloud

Khafeer is sold as a software licence, not a one-off project. You choose where it runs; the product, updates and support are the same.

On-premise licence

Runs on your servers

Install Khafeer in your data center, in your private cloud tenant or on an isolated network with no internet connection.

  • Annual licence, priced by the number of employees
  • Your data never leaves your network
  • Installation, training and updates included
  • Support with agreed response times

Cloud subscription

Hosted for you

We run Khafeer for you in a UAE data center, or in a cloud region in your country, ready in days.

  • Monthly or annual subscription, priced by the number of employees
  • Hosting, backups and monitoring included
  • Updates applied for you
  • Single sign-on and role-based access

The price depends on the number of employees and the support level. We reply within one business day and send a written quote after a short scoping call.

Track record

Trusted by UAE government entities and global brands.

Authorized vendor to five UAE government entities, with projects delivered for Hindustan Unilever, USA Today, Nokia and Linde.

Startups and enterprises served by our engineering teams
150+
Startups and enterprises served by our engineering teams
Average rating on Clutch, Trustpilot and Glassdoor
4.9/5
Average rating on Clutch, Trustpilot and Glassdoor
Client satisfaction rate
98%
Client satisfaction rate
UAE government entities we are an authorized vendor to
5
UAE government entities we are an authorized vendor to

Hear it from our clients

  • Client testimonial

    E-commerce

  • Client testimonial

    Healthcare

  • Client testimonial

    E-commerce

  • Client testimonial

    E-commerce

Privacy and security

Used for training, never for discipline

Hosted in the UAE

Employee data and results stay in a UAE cloud region or on your own servers.

Results stay with security

Only the security team sees who clicked, and the product is designed for coaching, not punishment.

Clearly marked simulations

Templates need approval before launch, and any campaign can be paused at any time.

Sign-in and roles

Single sign-on with multi-factor authentication, and roles that limit who can launch and who can view.

Book a demo

See a phishing simulation from launch to report

We build a campaign, show what an employee sees when they click, play a sample AI voice-phishing call and walk through the risk dashboard, in English or Arabic.

  • A live demo, not slides
  • Arabic and English content
  • Under NDA if you need one

4.9/5 average rating · 98% client satisfaction · 150+ clients served

Book a Khafeer demo

We only use your details to reply to you. Arabic or English, as you prefer.

FAQ

Security awareness questions, answered

What is Khafeer?

Khafeer is a security awareness platform. It runs simulated phishing by email, QR code and AI voice call, gives short training to employees straight after a mistake and on a regular schedule, and reports a human risk score for the organisation and each department.

What is a phishing simulation?

A phishing simulation is a harmless copy of a real attack sent to your own staff. It shows who would click, enter details or report the message, so training can focus where it is needed.

What does security awareness training include?

With Khafeer it includes simulated phishing by email, QR code and voice call, short lessons shown straight after a mistake, regular modules with quizzes, videos and posters in Arabic and English, a button to report suspicious emails, and reports that show the risk in each department.

Is Khafeer a phishing simulation tool?

Yes. Khafeer is a phishing simulation tool and a training platform in one: you build campaigns from approved templates, send them by email, QR code or voice, and anyone who falls for one is trained automatically.

Does it support Arabic?

Yes. Templates, training modules, the employee portal and the admin console are in Arabic and English, and voice simulations run in Emirati Arabic, Modern Standard Arabic and English.

What is AI voice phishing (vishing) testing?

An AI voice agent calls selected staff and plays a scripted scenario, such as an urgent payment request from a manager, to see whether they verify the caller. Khafeer uses Nida, Birbal AI's voice agent, for these calls.

Where is our data kept?

In a UAE cloud region or on your own servers. Employee data and results do not leave the UAE.

Will employees be punished for clicking?

That is your policy, but Khafeer is designed for coaching: results are visible only to the security team, and a person who clicks is shown what to look for next time.

How is Khafeer licensed?

As an annual on-premise licence installed on your servers, private cloud or an isolated network, or as a monthly or annual cloud subscription that we host in a UAE data center or a cloud region in your country. Both include updates and support.

Find out who would click, before an attacker does

See Khafeer run a simulation and the training that follows.

Book a Khafeer demo