TrustRadius: an HG Insights company

KnowBe4 Security Awareness Training

Score9.1 out of 10

1,147 Reviews and Ratings

What is KnowBe4 Security Awareness Training?

KnowBe4 is a security awareness and compliance training and simulated social engineering product. It is used by organizations worldwide to strengthen their security culture and reduce human risk.


The product includes a comprehensive suite of awareness and compliance training, real-time user coaching, AI-powered simulated social engineering, crowdsourced anti-phishing defense and an AI suite that enhances human risk management through personalized training and automation. With content in 35+ languages, KnowBe4 provides an always-fresh library of engaging content to strengthen an organization's human firewall.


KnowBe4 provides:

  • Baseline testing to assess the Phish-Prone™ Percentage of users through a free simulated phishing attack

  • Fully automated simulated phishing attacks, using thousands of customizable templates with unlimited usage

  • AI-Driven phishing and training recommendations based on users' phishing and training history

  • Enterprise strength reporting, showings stats and graphs for both training and phishing, ready for management

  • Artificial Intelligence Defense Agents (AIDA), AI-powered agents that reduce admin burden by automating template generation, training and reporting

Categories & Use Cases

Media

the Phishing Dashboard. This displays how end users are doing at-a-glance and in comparison to peers across industries with Industry Benchmarking.
the Virtual Risk Officer functionality, which helps identify risk to support data-driven decisions about a security awareness plan.
KnowBe4's partners, including The Security Awareness Company, Popcorn Training, exploqii, Twist & Shout, El Pescador, CLTRe, Saya University, and MediaPRO. Together, they create security awareness training content available in the ModStore.
a security training quiz question showing "Security Moments Series: Spot the Bad Link" asking what Lisa should do when receiving an unexpected email with an HTML attachment, with three answer options and Submit/Cancel buttons.
the AIDA Phishing Template Generator interface, which displays a customizable phishing simulation tool with template setup options on the left and a preview of a generated "Annual Bonus Announcement" email featuring a QR code attack vector on the right.
the AIDA Configure Training interface, which displays settings for personalized remedial phishing training, including user enrollment options, completion timeframes, knowledge refresher schedules, and notification preferences, with an "Activate Remedial Training" button to implement the configuration.

1 / 6

Top Performing Features

  • Phishing Simulations

    Administrators can run simulated phishing attacks to test the effectiveness of the training and assess vulnerabilities.

    Category average: 9.1

  • Single sign-on capability

    The software system supports a centralized authentication mechanism allowing the user to access multiple systems with a single, centrally managed password.

    Category average: 9.2

  • Role-based user permissions

    Permissions to perform actions or access or modify data are assigned to roles, which are then assigned to users, reducing complexity of administration.

    Category average: 8.7

Areas for Improvement

  • Training Gamification

    Training content is available in a gamified format.

    Category average: 7.9

  • Individualized Security Training Plans

    Training can be tailored to individual employees based on previous training, role, or assessed vulnerability.

    Category average: 8

  • Industry-Specific Security Training

    Security training can be tailored based on industry-specific requirements, such as HIPAA, PCI DSS, GDPR, etc.

    Category average: 7.4

KnowBe4 is a Leader in SAT for Good Reasons

Use Cases and Deployment Scope

KnowBe4 is a industry leading security awareness training tool, which can be used to send out cyber security training content, phishing campaigns, and other resources depending on the modules you have purchased. The user is the weakest link in the security chain, and so it is important to educate and raise awareness for different threats that users will encounter. Before I purchased KnowBe4 I had to scrape together different products to send out phishing campaigns, and I was creating my own training material. This took time and meant that I wasn't able to do this as often as I would like. However, with KnowBe4 I have access to a large library of email templates, training modules, and customizable features for educating my staff.

Pros

  • Customizable Phishing Campaigns
  • Excellent Training Modules
  • Multiple Product Integrations

Cons

  • More Content for Non-Diamond Users
  • More Interactive Training Material
  • Customizable Reporting

Return on Investment

  • Lower Click Rates
  • Higher Report Rates

Alternatives Considered

Webroot Security Awareness Training, Microsoft 365 Defender and THRIVE Learning & Skills Platform

Other Software Used

Webroot Email Security Powered by Zix, Webroot Advanced Email Encryption powered by Zix, Microsoft 365 Defender

KnowBe4 - Security Awareness Training that works

Use Cases and Deployment Scope

We perform monthly phishing expeditions of all employees. We also require monthly Security Awareness training videos be completed by each employee. It is part of their annual performance evaluation. We also take advantage of the KnowBe4 Phish Alert button for Outlook. All employees can report suspected phishing messages to IT this way.

Pros

  • Keeps end-users aware of security practices that they should be employing
  • Makes end-users aware of the various ways that security threats can manifest themselves
  • Helps the organization understand how well prepared our staff our to recognize phishing attacks

Cons

  • The only thing we wish was available was a method to email CSV attachments directly to IT staff; rather than having to chase links. This is for report integration.

Return on Investment

  • We've had several reports from employees that claimed that their responses to potential security threats were the direct result of what they had seen on one of the training videos
  • It has actually made staff interested in the security topic. We've had requests to "binge watch" our training videos. At least one department has printed a large The Inside Man banner for their break room.

Usability

Employees gets to know the security attacks and trends before time because of KnowBe4

Use Cases and Deployment Scope

This helps in getting all employees get basic security awareness training and it helped a lot from phishing attacks and many more attacks

Pros

  • Providing information on Latest security trends
  • Providing information on Common attacks

Cons

  • More contents on developers secure code training needed

Return on Investment

  • An attack can cost a huge loss , so comparatively investing on employees training and Knowbe4 is completely worth

Alternatives Considered

Coursera and Mimecast Awareness Training

Other Software Used

Mimecast Awareness Training

KnowBe4 A

Use Cases and Deployment Scope

We currently use KnowBe4 Security Awareness Training to send phishing campaigns to our users monthly. We also send quarterly trainings on different topics quarterly. Topics include everything from Teams security to phishing. We've also focused on QR codes, as those are becoming more of a threat lately.

Pros

  • Customized phishing campaigns
  • Amount of phishing templates
  • Training videos

Cons

  • So many features can be confusing
  • No syncing with Azure AD

Return on Investment

  • So far, we've been able to avoid any security issues through email.
  • Changed employee behavior. They are less likely to click anything in an unknown email.
  • Saves time in preparing for compliance audits. Reporting helps!

Usability

Alternatives Considered

Mimecast Engage Awareness Training, Proofpoint Security Awareness Training, Cofense PhishMe and Hoxhunt

Other Software Used

Mimecast Advanced Email Security, Abnormal Security, SlashNext Mobile

Everyone should KnowBe4 Security Awareness Training

Use Cases and Deployment Scope

I use KnowBe4 Security Awareness Training for phishing simulation and training to help employee awareness. The issues, we and most companies face, are the advanced phishing emails and malware threats.

Pros

  • provides social engineering awareness
  • keep employees up to date
  • prevent malware and clicking on malicious links

Cons

  • more employees are reporting phishing emails
  • after training, there are less "clickers" with phishing emails
  • more "Short" training material as employees don't have time to watch longer videos

Return on Investment

  • helping with awareness across the board
  • compliance with HR training
  • can reach all employees and new hires

Usability

Alternatives Considered

Barracuda Email Protection

Other Software Used

Barracuda Email Protection