Restore trust in phone calls by verifying callers with SHAKEN

SHAKEN compliance in hours not months.
Get started now

Solutions

Gin

SHAKEN Certificate Issuance.

Fully automated onboarding and certificate issuance.

Learn more

Vermouth

Free!
ATIS compliant Signing and Verification.

Turn-key call metadata signing and verification.

Learn more

Olive

Free!
SHAKEN Certificate Lifecycle Management.

Fully automated certificate and SPC token management.

Learn more

Everything you need

We offer a turn-key solution for SHAKEN compliance. Everything from the certificate issuance and management to the software you use for signing and verifying caller metadata.

Transparent pricing

No more counting certificates. Our subscription pricing ensures your organization gets the certificates it needs, when you need them.

Fast turn around

Take back your day. We have the fastest turnaround time for certificate issuance in the industry. Apply for a certificate and it will be ready in minutes.

Built by experts

The team of experts behind Effective Security has decades of experience in Silicon Valley, Public Key Infrastructure (PKI), and telecommunications.

Questions & Answers

What is STIR/SHAKEN?

It is a suite of protocols that enable service providers to identify the originator of a phone call. This enables building a reputation for each originator. Overtime this will help service providers identify which originators are the source of spoofed caller ID metadata and ultimately bring back trust to phone calls by blocking these calls.

How do I deploy STIR/SHAKEN signing?

We have built Vermouth an open source solution, that makes signing and verifying caller metadata easy.

What is STIR/SHAKEN certificate?

At the core of STIR/SHAKEN is the concept of cryptographically signing call metadata using a private key associated with a certificate. This certificate identifies a service provider or specific telephone numbers. It is issued by a certificate authority, similar to how a passport is issued by the passport office, and identifies the organization that is represented in this certificate. The same basic approach is used to identity websites via HTTPS today.

More Q&A

Blog