KnowBe4 has been a game-changer for us.

This is a great product that addresses a major security risk that many companies overlook. Quite simply, it is a great product for educating end users and keeping them aware of email security, Phishing, and more. We onboard each new staff member by requiring them to complete a series of training. This product totally automates that process and includes the detailed reporting that you would expect. We were one of the first school districts in Nebraska to utilize this product, and it's been adopted by many others since. It's a product that you can set it up and let it run the campaigns and training for you, or you can manually do whatever you need as well. (Or a combination of both.) Its templates are great, but if needed, you can customize them as well. Their support is great, but honestly, you really hardly ever need them. Our customer service rep checks in every few months, and we normally take those calls and emails since they are pretty helpful with tips and other settings and not just a "sales call." This product is one that I would be hard-pressed to give up because it probably addresses the weakest link in the security chain, that being the end user and what they are willing to click on and give up for a free cup of coffee.

They are always adding content, and it's always relevant and high quality. Every year we use the Mitnick modules in the product, and they update those yearly, which is great. Those modules alone are worth it. Everyone has different needs depending on their area, so some modules will not fit your need, but they have them if you do.

Ours is automated via AD connection, so users are automatically pulled right from AD based on a group or AD OU. I know you can do it other ways, but if you have AD you would want to automate this process. (And yes, you can exempt a user from being pulled into the product even though they happen to be in that OU or group. We have to do this once in a while since we don't really require training for that user, but they do need to be in that OU.) We do SSO through Google and it also works well.

The phishing security report for each of our campaigns is always valuable. You have a lot of flexibility here, but we really don't need it in our school district. We automate the reports to selected individuals including our IT staff and make recommendations and take action on those results.

We use the Active Directory integration and it works seamlessly. We also use a Google SSO and it work well. (Pull emails out of AD for that SSO integration to work.)

We have not really explored this aspect, so I don't want to comment on this feature.

We do not use their PhishER product.

No, just on their regular support, which we hardly ever need.

Their customer relations person reason out and often provides some one-on-one review of new features and gives us tips. They will also help in implementing those new features, phishing campaigns, etc...