Stop deepfake video before your team acts on it
Catch synthetic faces and manipulated video on Zoom, Teams, Meet, and Webex, scored continuously through the call, whether the fake is an executive, a vendor, or a job candidate.
From signals to one action your team can take.
- Synthetic detectedVideoGeneration artifacts consistent with a face swap or full avatar
- FailedLivenessStream characteristics point to injected rather than captured video
- All participantsCoverageEvery face on the call scored, not only whoever is speaking
- Pressure risingConversationAuthority framing and a compressed deadline alongside the media flag
Hold the call. When video and conversation cross threshold, the team verifies before the irreversible step.
How video scoring runs
The same pipeline runs on a live call and on a file you upload to the detector. Nothing is installed on the other participant's side.
- 1
Sample the stream
Frames are sampled continuously through the call rather than once at the start, so a clean opening does not buy the attacker the rest of the meeting.
Continuous · no caller-side install
- 2
Score against our own models
Each detected face is cropped and scored for generation artifacts by models Diopter builds and maintains, so a call with four participants produces four independently scored subjects.
Proprietary models · per-face attribution
- 3
Keep scoring to the end
Scoring does not stop after an opening sample. A participant who joins late, turns their camera on halfway through, or only speaks at the ask is scored the same as everyone else.
Real time · full call duration
- 4
Resolve one verdict
Per-face results combine into one band with a confidence level and the underlying evidence retained, so a reviewer can see which face drove it.
Bands: AI · mixed · clean · inconclusive
Where deepfake video shows up
- 01
Deepfaked executives on camera
Attackers join approval calls as a convincing on-camera executive or colleague, the way the Arup call put a fake CFO and fake colleagues in one meeting.
- 02
Synthetic candidates in interviews
Fraudulent candidates use deepfake video to pass remote screens and reach payroll and systems.
- 03
Spoofed vendors on video
A vendor rep on a video call who is not who they appear to be, pushing a payment or a change.
How a deepfake video attack unfolds
These attacks move through a recognizable sequence. Diopter scores that sequence while the call is still in progress.
A trusted face appears
An executive, colleague, vendor, or candidate shows up on camera, convincing at first glance.
A deadline compresses the check
A close, a payroll run, or an offer window pressures the team to act before verifying.
The call narrows
The conversation moves to a smaller meeting or an off-domain follow-up that removes witnesses.
The asks build
Each step normalizes the next, an approval, then access, then one more exception.
The decision lands
An approval, a hire, or a transfer goes through on the strength of a face that was never real.
Every call where a face is the credential.
Wherever a decision rests on recognizing someone on camera, this is the check that stands behind it.
Interview screens
A candidate whose face is generated or swapped, caught during the round rather than after the offer.
Treasury and closing calls
The finance lead authorizing a transfer, scored before the wire is released.
Supplier and AP calls
The rep on camera asking for a banking change, checked against who they claim to be.
Board and executive sessions
Larger calls where the quiet attendee matters, because every face is scored and not just whoever holds the floor.
One frame is a coin flip. A whole call is evidence.
Single-image detectors are graded on stills, and a current face-swap model beats them often enough to be worth the attacker's time. Video is a much harder thing to fake convincingly for an hour: the artifacts have to survive every head turn, every lighting change, and every compression pass. Diopter scores every face against models we build ourselves rather than a public detector an attacker can rehearse against, and it keeps scoring for the length of the call, so what your team gets is a verdict attributable to a person rather than a probability on one screenshot.
A deepfaked face on camera passes a frame check. The way that fake builds authority and pressures the room does not.
Where single-layer tools stop.
Each category below covers one part of the attack and is blind to the rest. The last column is the only one that correlates them into a single verdict.
Detects synthetic voice on a live call
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
Detects deepfake video frames
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
Verifies caller identity (reputation/biometric)
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
Models the conversation arc (pressure → ask)
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
Correlates identity, media, and conversation signals on live calls
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
Forensic evidence chain for incident review
- Awareness training
- Single-frame deepfake
- Identity / reputation
- Live-call detection
- Diopter Arc
| Capability | Awareness training | Single-frame deepfake | Identity / reputation | Live-call detection | Diopter Arc |
|---|---|---|---|---|---|
| Detects synthetic voice on a live call | |||||
| Detects deepfake video frames | |||||
| Verifies caller identity (reputation/biometric) | |||||
| Models the conversation arc (pressure → ask) | |||||
| Correlates identity, media, and conversation signals on live calls | |||||
| Forensic evidence chain for incident review |
What video detection does not claim
Worth reading before a pilot, because these are the cases that generate a support ticket if nobody told you first.
A clean result is not proof of authenticity
Clean means our detectors found no manipulation in what they were able to evaluate. It is evidence, not a guarantee, and the report says so rather than implying certainty.
Coverage is reported, not assumed
If a participant kept their camera off, joined for twenty seconds, or came through at a bitrate too low to score, that is reported as inconclusive rather than quietly counted as clean.
Confidence never reads 100 percent
The highest the report will state is over 99 percent. A detector that claims certainty is the one number a buyer can hold against it later.
Light to deploy, clear about what runs where.
Pilot in days, roll wider through MDM, and keep sensitive call media inside your perimeter.
- On-prem and hybrid deployments supported
- No caller-side install
- Bot or bot-free capture
- Configurable retention, including ZDR
- MDM rollout (Intune, Jamf)
- SOC 2 Type II in progress
Walk an attack arc with Diopter.
We will replay a real incident, show the signals Diopter scored, and map the verdict your team would act on. We will sign your NDA first if you want one.