Modern security teams already perform some of their tasks using AI systems such as Claude and ChatGPT. Human risk management can now also be carried out within AI environments.
Arsen MCP enables the platform to connect to an AI agent that is already in use. Advanced phishing simulations and security awareness training can be deployed and monitored directly through a chat interface.
New Capabilities for CISOs and Executive Leadership
Streamlining human risk analysis, reporting, and the planning of risk mitigation measures:
- Launch audit-ready assessments through a chat interface. Tests that meet regulatory requirements can be initiated with a single message. The process includes a preliminary cost estimate, launch approval, and automated report generation.
- Combine human risk data. The new functionality enables Arsen data to be used alongside information from SIEM platforms, ticketing systems, and other databases. This allows AI to generate consolidated responses based on multiple data sources.
- Generate strategic insights on demand. Monitoring phishing link click rates, assessing overall trends, and identifying priorities for individual departments are now possible through a single, convenient analytical report for company leadership.
New Capabilities for IT, GRC, and Security Awareness Teams
Implementing and verifying security programs directly through a chat interface:
- Deploy phishing simulations within a single conversation. The functionality supports preliminary analysis of scenarios and target groups, configuration approval, and immediate campaign launch.
- Synchronize Arsen metrics with internal corporate data. MCP makes it possible to combine Arsen results with the company’s organizational structure, ticketing system data, and GRC tools without manually exporting CSV files.
- Generate audit evidence on demand. The system enables analysis of current coverage, active campaigns, participating audiences, and achieved results. It also supports effective planning of future assessments.
New Capabilities for MSPs and MSSPs
Centralized client management through a single chat interface:
- Seamlessly connect Arsen to existing IT infrastructure. MCP technology allows AI agents and other services to interact with the platform without developing and maintaining complex API integrations.
- Analyze client risks through a convenient interface. Activity monitoring, including phishing simulation success rates and suspicious activity reporting rates, can be performed directly through the assistant interface. The same interface supports the identification of inactive accounts and the development of upselling strategies.
The assistant generates responses based on internal Arsen data, prepares the next campaign, and launches it after approval.
As security infrastructures continue to expand, human risk management no longer requires a separate management console. MCP enables Arsen to operate within a unified ecosystem alongside other security tools, ranging from identity management solutions to SIEM platforms. This makes it possible to analyze the relationship between phishing simulation results and MFA vulnerabilities through a single request, then automatically schedule a targeted campaign.
This approach reflects the current direction of the industry: seamless integration of security infrastructure into the AI stack while maintaining full control at every stage.
Questions About Arsen MCP
What Is MCP?
MCP (Model Context Protocol) is an open standard that allows AI assistants to use tools provided by other software applications. Arsen MCP enables an assistant to retrieve results from the Arsen platform and, following the necessary approval, launch campaigns and initiate assessments.
Which AI Assistants Are Supported?
Claude is supported through the dedicated Claude connection button in the Arsen settings. Any other assistant that supports authenticated remote MCP servers can also be used. A setup guide is available for each tested assistant.
Is an Arsen Subscription Required?
No. A one-time phishing test and security awareness session can be ordered through an AI assistant and paid for using credits, without requiring a subscription. Existing platform customers, meanwhile, can access their entire program within the same conversation.
Can the Assistant Make Changes to the Arsen Platform?
Only after the appropriate approval has been granted. The AI assistant can schedule and launch campaigns or place orders, but it always presents the planned actions for review beforehand. No action is initiated until approval is received.
What Data Can the Assistant Access?
Access is restricted to information belonging to organizations that the user is authorized to access in Arsen. This includes simulation and training results, campaigns, and orders. All metrics remain aggregated at the group level, without identifying individual employees. Email contents and captured data are never included in the responses.
Is Data Transmitted to OpenAI, Anthropic, or Microsoft?
All information generated by the Arsen platform is processed exclusively through the connected AI assistant, in accordance with the terms of the existing agreement with the provider. The system does not initiate any additional data transfers. Organizations with strict security policies should consider integrating officially approved enterprise AI assistants or using dedicated Enterprise-level plans.
How Do Credits Work?
The process involves purchasing credits and using them to pay for assessments and sessions ordered through the AI assistant. Before each order is placed, the assistant always displays its cost in credits.
How Can Access Be Revoked?
Access can be revoked by selecting “Disconnect all AI access” in the Arsen account settings. This immediately terminates access for every connected AI assistant.
