AppsAI Agent Firewall

Voice and caller security

Caller ID check (STIR/SHAKEN)

On every inbound call, the Autessa caller ID check reads the carrier’s STIR/SHAKEN attestation and applies your action for Verified, Partly verified, Not checked and Failed numbers, and a number that isn’t verified is never matched to a member.

Turn on the firewall
Inbound call · caller ID resultSTIR/SHAKENSAMPLE
Verified: the carrier confirmed the numberattestation AALLOW
Partly verified: caller known, number notattestation BFLAG
Not checked: no result on the callcommon from abroadFLAG
Failed: the number may be spoofednever matched to a memberCHALLENGE

The problem

Spoofing a phone number takes seconds. If your agent trusts caller ID, anyone can pose as your CFO’s mobile number.

How caller id check (stir/shaken) works

STEP 1

Read the carrier’s result

Phone carriers sign most calls. The firewall reads that signature’s result on every incoming call.

STEP 2

Map each result to an action

Verified → Allow, Partly verified → Flag, Not checked → Flag, Failed → Ask to verify, by default. Change any of them.

STEP 3

Protect member matching

Authenticator codes and phone approvals are only used when the caller ID was verified, so a spoofed number can’t borrow a member’s identity.

Every setting

Verified

The carrier confirmed the caller may use this number. Default: Allow.

Partly verified

The carrier knows the caller but not that they own this number. Default: Flag.

Not checked

No result, common from abroad or older networks. Default: Flag.

Failed

The check failed; the number may be spoofed. Default: Ask to verify.

Who can do what

Admins

Set the action for each result.

Agents

Read the result through the Get Caller Info tool.

What to know

  • The result shows in each call’s details.
  • Calls from abroad often arrive without a result, which is why Not checked defaults to Flag rather than Block.

More in Voice and caller security

Voice deepfake detection →Every thing a caller says on a phone call or in voice chat gets a synthetic-voice score from 0 to 1, labeled Real, Synthetic or Unsure, and a policy action applies at 0.5 or above.Voice watermark →Autessa agent voices carry an inaudible watermark, so replayed agent audio is treated as synthetic, and the voice score API reports whether a clip came from an Autessa agent.All of Voice and caller security →

FAQ

Caller ID check (STIR/SHAKEN): questions

What is STIR/SHAKEN?

It is the framework phone carriers use to sign calls and attest whether the caller is allowed to use the number shown. Autessa reads that attestation on every inbound call to your agents.

Can a spoofed number pass verification?

Not with an authenticator code or phone approval: those are only matched to a member when the caller ID was verified by the carrier.

Turn on caller id check (stir/shaken).

On every inbound call the firewall reads the carrier’s STIR/SHAKEN result and applies your action for Verified, Partly verified, Not checked and Failed numbers. Start in Monitor and see what it would catch on your real traffic.

Turn on the firewall

Starts in Monitor · nothing changes for your customers until you enforce

100% customizable, code and all

Make Autessa AI Agent Firewall fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours