Easy of use, the ability for our staff to learn and protect themselves and the organisation.

I haven't really looked into areas for improvement

Its a good tools especially for a non techie Admin who want to do same work as a high level techie Security Admin/Analyst would do in a real world.

Providing awareness and Social engineering testing

We invested in KnowBe4 roughly a year ago to assess and monitor our staff's ability to identify Phishing and Spear Phishing emails. We were very quickly able to establish baseline and then with introduction or awareness training and the Phish Alert Button we were able to decrease our Phish-Prone rate within our company by 0ver 90%

I find it extrodinarily frustrating not to be able to edit the content of training campaigns that are in flight. For example we have a continuously running new hire training campaign, but it is endlessly frustrating and an administrative mire, when I need to update that content, as I am forced to create a new campaign instead of just augmenting the existing one. This is the only major stumbling block I've run into with this solution.

This is solving our general security awareness training, as well as dept specific training and annual refreshers. There is a wealth of great training collateral in many forms, Videos, papers, poster and games to check my staff engaged.

Additionally the Phish Alert Button is a huge asset, I wish it work in shared exchange mailbox too, but we are working around that.

Phish ER is very intriguing, but it only operates on data from the PAB, this needs to to examining email and flagging it BEFORE it gets to the user, at that point the tools will have a truly significant ROI for SNOCs

I enjoy the large library of learning videos and other resources. I can create custom learning playlists and tailor them to the many types of users in the organization. The Phishing simulator function is such an effective way to innoculate user to Phishing emails. For example, the baseline test failed almost 70 percent of the organization. After the training videos and hands-on instruction on spotting fake emails, my failure rate dropped to zero! Now people in my organization come to me and say " I printed this email out because it looks suspicious, the return-to email URL was incorrect"

The one thing I can say is the there is a large wealth of content available and choosing the writing curriculum or content can be challenging. I would like more assistance from account reps that are somewhat knowledgeable about my companies space

Make sure you ask your account POC to help craft a training curriculum based on your industry. This will make implementation and training much faster

I am solving the issue of information leakage and protection of the network. We have reduced our failure rate from 70 percent to 0 percent in less than 4 weeks

The training material is fantastic. So many corporate training programs just cover enough material to protect the company legally. KnowBe4 focuses on training individuals to protect themselves, and the company they work, for by giving many (many!) real world examples to help understand the how, what, where, and why of security. Training material, itself, is pointless unless it sinks in. The structure and variety of training material offered does just that, it sinks in and stays with you. Another feature, that is extremely helpful, is the ability to set up recurring phishing tests.

The administrative interface isn't the most intuitive. Everything you need to do is there, sometimes it just takes a little trial/error to figure it out. This is a very minor inconvenience for the vast quantity of training/testing material and approaches you receive.

Training and testing material is worthless if the content is not easy to understand and remember. KnowBe4 goes out of their way to make all of their content extremely easy to understand and the material is quite in-depth and extensive.

My users, at least those that have been around a few months, can easily identify phishing and security threat related emails, almost immediately. We have dropped from 17% click prone to <1% in less than a year. My users also understand building security better, which is important in this unstable society we live in.

My on-boarding process with my rep was flawless, he walked me through everything so clearly and I was able to keep up my training and campaigns on my own with no issues.

I honestly can't think of any. Before I instituted our KB4 training, there was no phishing training at all in my company. I get thanked about once a week by someone for putting this into place and opening people's eyes to what is out there.

Trust KnowBe4! They have super knowledgeable folks on their team that are always willing to help make your life easier.

The folks at my company get a lot of emails, and before KB4, they weren't being vigilant to not click on things. This has opened their eyes and they are thankful for it.

KnowBe4 is service oriented--they check in with their customers and walk them through setting up phishing test campaigns.

I don't like having to set up phishing tests myself--but KnowBe4 makes it easy and they will do it with you.

KnowBe4 is reasonably priced and is important in today's world. Think of the costs of failure--of malware, ransomware, and data loss. You have to educate your employees. KnowBe4 makes it easy.

KnowBe4 his been critical in training our employees about phishing and other security threats. They make phishing tests that teach users to question every email they receive. And the results are measurable.

KnowBe4 creates employee awareness around phishing and other targeted attacks which they would otherwise fall victim to.

PhishER should be part of the paid KnowBe4 suite. We utilize the PAB; however, the report e-mail simply goes into a black hole. We have limited staff, so we can't follow-up on every reported e-mail. At the very least the price should be dropped significantly for existing customers.

If you are on the fence about purchasing this product (as I was), I can tell you with 100% certainty that it quickly and easily creates end-user awareness, and as a result will significantly lower your risk potential and subsequently reduce your attack surface.

Our click rate has dropped substantially. We started at approximately 25% and after 5-6 months, it has dropped to somewhere between 3-4%. This means that our employees now look at every e-mail as potentially suspicious which helps with overall mitigation.

We love the simplicity of setting up phishing and security awareness campaigns. It is also very simple to set and forget training campaigns along with email reminders to end users and their managers. We also love the variety of training videos in the mod store.

We would like a way to create our own corporate documents to add as campaigns just so they are more personalized. Then we could set training campaigns that are personalized and track them. For instance yearly employee agreements can have campaigns off of them to be tracked for completion of reading.

We would like a way to create our own corporate documents to add as campaigns just so they are more personalized. Then we could set training campaigns that are personalized and track them. For instance yearly employee agreements can have campaigns off of them to be tracked for completion of reading.

The biggest benefit is that it has forced our end users to slow down, and cautious before clicking or replying to any email they are unsure of. We have been using KnowBe4 for just under a year, but daily now I am made aware of phishing attempts just due to the fact that our end users are trained on what to look for. I have probably blacklisted and reported 50 or more IP's and domains that I would have not know about otherwise if it weren't for the constant training an phishing campaigns that have made user more aware. Also it has made users more apt to report.

Features! The platform integrates results of phishing tests and training in an easy to use interface. It's easy to create phishing and training campaigns, and sort through our results. A huge advantage of the platform is the extensiveness of the training material that is available. Always getting great service from our assigned rep. What we also wanted was a solution that was available in Europe, which was a big plus for us. The ability to track training progress is also very useful.

We ran into a few quirks in the interface, with minor issues in some templates. Nothing that would be a showstopper. Unavailability of translations for material in some languages is somehow of an issue, as it i mandatory for us to make the material available in all our official languages.

We picked KnowBe4 after a thorough review of what was out there. If you are going to pick a product, think of how integrated and mature you want it to be. Enquire about number of phishing templates available, number of landing pages available, number and list of training modules included in your package, reporting quality, ease of integration.

Reduce phish prone rate from over 20% to less than 2% in less than 6 months.

Meet regulatory and contractual compliance issues

Super easy to use product that makes my team's busy lives easy when it comes to compliance testing on security, HIPAA, development OWASP Top 10, and GDPR. They even have a wizard to get you up and running in minutes! They even provide cool tools like AV tester so you don't have to get your own viruses to test your AV tool, a password guesser for commonly used simple passwords on your network, and probably more I don't know about. They also have text templates for emails to remind people of today's latest threats and keep us updated weekly on new ones. Just grab and tweak and send to my users.

Ability to easily view all the custom content without assigning it to a group.

Tons of video content, frequent updates of warnings to look out for, create emails to keep you as admin up-to-date on security trends from CEO, easy compliance, automatic re-enrollment with those that failed phishing probes, and great people to work with!

Compliance and educating our users on security, HIPAA, development OWASP Top 10, and GDPR. Our last process was manual and not very auditable. With KnowBe4, I have full confidence in auditability of our education and we can do phishing tests and automatic adding of users that failed into more security training!