VoiceGoat is a modular platform designed for security practitioners to practice exploiting voice-based AI systems, covering OWASP Top 10 for LLM Applications across three services: VoiceBank (LLM01: Prompt Injection), VoiceAdmin (LLM06: Excessive Agency), and VoiceRAG (LLM08: Vector/Embedding vulnerabilities).
The platform runs in Docker and supports multiple LLM backends—mock (free, no API keys), OpenAI, and AWS Bedrock—with optional real phone call integration via Twilio; practitioners capture flags in CTF-style for successful exploits across Easy, Medium, and Hard difficulty levels.
The project is intentionally vulnerable and designed for educational and security training purposes only; deployment in production or exposure to the public internet without proper safeguards is explicitly discouraged, with source code and documentation available on GitHub.
Summaries like this, in your inbox every morning.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Chunghwa Telecom president Rong-shy Lin said the shift from conversational AI to autonomous AI agents is resha…
Apple and Meta said they would jointly release a new open-weight AI model designed to run on high-end Macs, ai…
A writer and entrepreneur opened his daily to-do list and found 156 items, and concluded that an AI assistant…
A Zenn contributor sorted AI use into three modes — AI as an assistant, AI running alongside people, and AI th…
A non-engineer operator says one person ships four smartphone apps on Google Play, three on the App Store, wit…
The walkthrough points the CLI at a local mock via the ANTHROPIC_BASE_URL environment variable
