Deepfake and synthetic-fraud defence that runs inside your building.
FaceOff Security in a Box checks faces, voices, behaviour and video for signs of fakes and impersonation, watches open sources for threats to your brand, and answers analysts with a small language model that runs fully on the box. FaceOff states that no data leaves your network. XcellHost supplies, installs, monitors and supports it in India.
Face-swaps, cloned voices and fake officers on video are everyday fraud tools. Indian authorities have issued advisories, amended the IT Rules and tightened video KYC checks. These are the rules and warnings the box is built to help with.
MHA has warned that fraudsters pose as police, CBI, Narcotics, RBI or ED officials, keep victims on Skype or other video calls, and use studios styled as police stations with uniforms to look genuine1.
3,962 Skype IDs and 83,668 WhatsApp accounts used for digital arrests blocked by I4C; 7.81 lakh SIM cards blocked till 28 Feb 20252.
The IT Rules amendment on synthetically generated information was notified on 10 Feb 2026 and applies from 20 Feb 2026. AI-generated content must be labelled with traceable metadata, and unlawful content must come down within 3 hours of a government or court order3.
CERT-In's directions of 28 Apr 2022 require specified incidents to be reported within 6 hours of noticing them4. Advisory CIAD-2024-0060 (27 Nov 2024, severity High) asks for call-back verification on sensitive transactions, detection tools and forensics capability5.
RBI's KYC Directions, 2025 ask V-CIP for face liveness and spoof detection, face matching, live GPS geo-tagging, real-time (not pre-recorded) interaction and V-CIP data stored in India6.
| Rule or warning | What it asks for | Where the box helps |
|---|---|---|
| RBI KYC Directions28 Nov 2025 · V-CIP | Liveness and spoof detection, face matching, real-time interaction, data in India6. | SyntheticMediaGuard and Voice Forensics check each session on site; data stays on the box in India. |
| IT Rules amendmentin force 20 Feb 2026 | Label synthetic content with traceable metadata; act on unlawful content within 3 hours of an order3. | SyntheticMediaGuard helps platforms and newsrooms find synthetic media; TrustShield OSINT spots it in the wild. |
| CERT-In Directions28 Apr 2022 | Report specified cyber incidents within 6 hours of noticing them4. | Cases, evidence and SLM-drafted notes feed the report; the XcellHost SOC runs the clock with you. |
| MHA advisoriesdigital arrest fraud | Public warnings on fake officers, video calls and staged police stations1. | Face and voice checks for banks, helplines and cyber cells; checklist and quiz below for the public. |
| DPDP Act, 2023duties from 13 May 2027 | Faces, voices and behaviour that identify a person are personal data: notice, a lawful ground, purpose limits and safeguards7. | Processing on your premises; pair with Privacy in a Box for notice, consent and evidence. |
Regulatory summary prepared by XcellHost for orientation, not legal advice. Each regulated entity follows the directions that apply to it; check the current text before relying on it.
Each capability below starts with FaceOff's own description from its brochure. The "how it works" notes are XcellHost's plain-language summary of the general technique; FaceOff shares exact specifications and benchmarks during scoping*.
Deepfake image & video detection.
Checks photos, recorded clips and live video for face-swaps, re-enacted faces and fully generated people before they are trusted by a KYC officer, an editor or an investigator.
Confirm with FaceOff* supported formats and resolutions · live stream vs file · results on your own sample set · streams per box
Behavioural identity verification.
Checks that the person using a session behaves like the real account holder, so a stolen password, OTP or remote-access session is not enough to take over an account.
Confirm with FaceOff* web, Android and iOS collection · learning period · how behavioural data is minimised. Behaviour that identifies a person is personal data under the DPDP Act, so plan notice and purpose up front.
Cloned & synthetic voice detection.
Flags calls and voice notes made with cloned or generated voices, such as a "CFO" approving a payment or a "relative" asking for urgent money.
Confirm with FaceOff* Indian languages and accents · telephony and SIP integration · minimum audio length · real-time vs recorded
Continuous verification, every access.
Treats every access request as untrusted until checked, instead of trusting a session for hours after one login.
Confirm with FaceOff* identity provider and SSO connectors · MFA methods · policy model. See also XcellHost AI Identity Security.
Open-source threat intelligence.
Watches public sources for fake profiles of your leaders, lookalike domains, fake customer-care numbers, leaked data and deepfakes that use your name.
Note. Collecting open sources needs controlled outbound access; analysis stays on the box*. Confirm with FaceOff* source coverage · languages · takedown support.
Real-time video analytics.
Turns camera feeds into alerts and searchable events, processed on the appliance rather than sent to an outside cloud.
Confirm with FaceOff* streams per box · camera protocols · retention settings. CCTV images of people are personal data; signage and retention rules apply.
In-house small language model that runs fully on the box. No data leaves your network.
Gives analysts and officers a plain-language assistant without sending case data, faces or call recordings to a public AI service.
Confirm with FaceOff* languages · model updates without internet · hardware sizing.
Good fraud passes a single test. Face, voice, behaviour and identity checks on the same box see the same session, so a fake has to beat all of them at once. Switch signals on to see how a combined decision changes.
No suspicious signals. The session carries on.
Teaching model by XcellHost. Real thresholds, weights and actions are set with you and FaceOff during deployment*.
Pick your sector to see the problems, the capabilities that answer them and the XcellHost pages that go with them.
Most AI security tools send media or text to an outside cloud for analysis. The box does the analysis where the data already sits, including the language model analysts talk to.
FaceOff states the SLM runs fully on the box and no data leaves your network.
Detection and the SLM run locally; updates are carried in on site. Exact offline behaviour is confirmed in scoping.
Faces, recordings, cases and evidence stay in your building, which fits V-CIP and localisation rules.
You hold the hardware, keys and logs. No foreign cloud sits in the analysis path.
Live calls and camera feeds are checked on your LAN rather than across the internet.
Cases, media and SLM answers are logged on site for audit, court or CERT-In.
FaceOff Security in a Box and XcellSecure Digital Authenticity Verification both use FaceOff technology. Pick the one that fits how you work, or use both.
| FaceOff Security in a Box | XcellSecure DAV | |
|---|---|---|
| Delivered as | An appliance on your premises | Stateless APIs and SDKs, with on-prem or private-cloud nodes |
| Scope | Seven capabilities, including OSINT, video analytics and an on-box SLM | Graded trust scores from 1 to 10 for faces, voices and documents in your apps |
| FaceOff technology | FaceOff Security in a Box | FaceOff modules such as Federated FaceOff, FaceOff-Agentic RAG and FaceOff Lite |
| Best for | Air-gapped sites, police, government, banks that want one closed box | KYC and onboarding flows that call a check per transaction |
| How to start | Scoping call and site survey, then a quote | 30-day pilot, indicatively ₹1,49,999* |
| Price | On quote | Professional indicatively ₹49,999* / month |
DAV prices are indicative figures from the DAV page, excl. 18% GST.
Seven quick questions on deepfakes, cloned voices and "digital arrest" calls. Share it with your staff and customers.
Tick what is happening on the call. The signs follow the pattern the Ministry of Home Affairs has warned about. Nothing leaves your browser.
If even one sign fits, slow down and verify on your own.
Awareness aid by XcellHost based on MHA public advisories; not an official government tool. Helpline 1930 and cybercrime.gov.in are the official channels. No real police or agency arrests anyone over a video call.
Describe your channels and network. You get a fit verdict, a box layout, the capabilities to switch on first and the XcellHost services that usually go with them. Box prices are quoted, not shown.
Appliance pricing depends on capabilities, capacity and sites, so every box is quoted. XcellHost services that go with it have list prices, shown below.
| XcellHost service | Price | Basis · same as on |
|---|---|---|
| Box supply, site survey, installation & integration | On quote | per site · sized after survey |
| 24×7 Security Operations · Essential | ₹199* | per endpoint / month · Security Operations |
| 24×7 Security Operations · Professional | ₹449* | per endpoint / month · Security Operations |
| SOC onboarding & transition | ₹24,999* | one-time · Security Operations |
| Deepfake & digital-arrest awareness workshop | ₹24,999* | per session · DAV page |
| XcellSecure DAV pilot (hosted checks, 30 days) | ₹1,49,999* | one-time · DAV page |
| Incident tabletop drill (DPDP + CERT-In clocks) | ₹29,999* | per drill · DPDP platform page |
INR, excl. 18% GST. * marks prices the linked XcellHost pages show as indicative — confirm with XcellHost. FaceOff appliances, licences and installation are quoted.
Pick managed security, awareness and drills. The box itself is quoted and not added here.
Evaluate on-premise processing for sensitive media, identity and investigation workflows.
Combine the supplied face, voice, behaviour and video capabilities for your use case.
Plan update paths and OSINT collection alongside your network access requirements.
Identify the customer, staff and media channels that need authenticity checks.
Use the deployment-fit tool to discuss a single appliance, high availability or an API pilot.
Scope connections to existing identity, security and investigation workflows.
Configure security operations services around your appliance.
Add awareness workshops and incident tabletop drills where needed.
Discuss appliance sizing, services and ongoing support with XcellHost.
It is FaceOff's AI-powered defence against deepfakes and synthetic fraud, delivered as an appliance on your premises. It includes SyntheticMediaGuard, BehaviorID, Voice Forensics, Zero-Trust Identity, TrustShield OSINT, Video Intelligence and a home-grown small language model that runs fully on the box.
FaceOff builds the platform and appliance. XcellHost, as a FaceOff partner, supplies it in India and handles the site survey, installation, integration, 24×7 monitoring from our Mumbai NOC and SOC, and support. You buy, get support and get billed through XcellHost.
FaceOff states that its small language model runs fully on the box and no data leaves your network. Detection runs on the appliance too. TrustShield OSINT needs controlled outbound access to collect public sources, and software updates are agreed with you during design.
That is what the on-premise design is for: detection and the SLM run locally. Exact behaviour with no internet, such as how updates and licences are handled, is confirmed with FaceOff during scoping. OSINT collection needs some outbound access or a separate collection path.
RBI's KYC Directions ask V-CIP for liveness and spoof detection, face matching, real-time interaction and data stored in India. SyntheticMediaGuard and Voice Forensics add deepfake and cloned-voice checks to each session, and the box keeps the data on your premises. Geo-tagging and recording stay with your V-CIP platform.
Banks, helplines and police cyber cells can check whether a face or voice on a call or recording is synthetic, and TrustShield OSINT can surface fake officer profiles and numbers. For the public, the checklist and quiz on this page follow MHA's advisories. Victims should call 1930 or report at cybercrime.gov.in.
Security in a Box is a closed appliance with seven capabilities, including OSINT, video analytics and an on-box SLM. XcellSecure Digital Authenticity Verification gives graded trust scores from 1 to 10 through APIs and SDKs, with on-prem or private-cloud nodes. Many teams start with a DAV pilot while the box is sized.
Yes. Faces, voices and behaviour that identify a person are personal data. You need notice, a lawful ground, purpose limits and safeguards; most DPDP duties apply from 13 May 2027. FaceOff Privacy in a Box handles notice, consent and evidence for this data.
The box is priced on quote, based on capabilities, capacity and sites. XcellHost services have indicative list prices: 24×7 Security Operations from ₹199 per endpoint a month, SOC onboarding ₹24,999, awareness workshops ₹24,999 per session and a DAV pilot ₹1,49,999. All exclude 18% GST.
Call +91 22 6711 1555, WhatsApp +91 86570 32540 or e-mail [email protected]. We run a scoping call and site survey, arrange a FaceOff demo and send an INR quote. Support is at [email protected].