A system to authenticate packetized audio signals in a voice activated computer network environment, comprising: a natural language processor component executed by a data processing system to receive, via an interface of the data processing system, data packets comprising an input audio signal detected by a sensor of a client device; the natural language processor component to parse the input audio signal to identify a request and a trigger keyword corresponding to the request; a direct action application programming interface of the data processing system to generate, based on the trigger keyword, a first action data structure responsive to the request, wherein the first action data structure includes information to perform an action responsive to the request; and a network security appliance to authenticate the input audio signal detected by the sensor of the client device based on a characteristic of the input audio signal and the first action data structure generated by the direct action application programming interface; wherein the direct action application programming interface is configured to identify an account based on the input audio signal authenticated by the network security appliance, and transmit, to a third-party provider device (155,160), the first action data structure responsive to the network security appliance authenticating the input audio signal based on the characteristic of the input audio signal and the first action data structure, receipt of the first action data structure by the third-party provider device causing the third-party provider device to execute the first action data structure; the network security appliance further configured to: receive a second input audio signal detected by the sensor of the client device; detect, based on a characteristic of the second input audio signal, an alarm condition; prevent, responsive to the alarm condition, execution of a second action data structure based on the second input audio signal; and transmit instructions to the third-party provider device to terminate a communication session established with the client device. a natural language processor component executed by a data processing system to receive, via an interface of the data processing system, data packets comprising an input audio signal detected by a sensor of a client device; the natural language processor component to parse the input audio signal to identify a request and a trigger keyword corresponding to the request; a direct action application programming interface of the data processing system to generate, based on the trigger keyword, a first action data structure responsive to the request, wherein the first action data structure includes information to perform an action responsive to the request; and a network security appliance to authenticate the input audio signal detected by the sensor of the client device based on a characteristic of the input audio signal and the first action data structure generated by the direct action application programming interface; wherein the direct action application programming interface is configured to identify an account based on the input audio signal authenticated by the network security appliance, and transmit, to a third-party provider device (155,160), the first action data structure responsive to the network security appliance authenticating the input audio signal based on the characteristic of the input audio signal and the first action data structure, receipt of the first action data structure by the third-party provider device causing the third-party provider device to execute the first action data structure; the network security appliance further configured to: receive a second input audio signal detected by the sensor of the client device; detect, based on a characteristic of the second input audio signal, an alarm condition; prevent, responsive to the alarm condition, execution of a second action data structure based on the second input audio signal; and receive a second input audio signal detected by the sensor of the client device; detect, based on a characteristic of the second input audio signal, an alarm condition; prevent, responsive to the alarm condition, execution of a second action data structure based on the second input audio signal; and transmit instructions to the third-party provider device to terminate a communication session established with the client device.