KnowBe4 Reviews

My team and I use KnowBe4 primarily for security awareness training. The company assigns new training modules every few months, covering several topics such as phishing emails, safe web browsing, and other general security awareness training. More recently, we've received new modules related to the safe usage of AI tools and guidelines for preventing unintentional data breaches when interacting with AI systems; that is how we are using KnowBe4 in our company.

Besides security awareness, KnowBe4 gives me knowledge I didn't have before, such as the AI-related topics. Our work involves AI tools, and previously, my colleagues might have shared information that shouldn't be there in AI. With the training modules from KnowBe4, it raises our awareness about the information that could breach our company when using AI; I find that aspect positive about KnowBe4.

Most valuable for me are the interactiveness and format of KnowBe4. It has a realistic format; for example, when I'm taking the phishing simulations, the modules give me examples of the real phishing types that might be in my mailbox and how to deal with them. It's good for raising awareness of the threats, and I think it's easy to follow, even for non-technical staff. It is really effective for raising good habits regarding the threats.

The simulated phishing attacks feature has examples of several phishing attacks through email. It gives me four or more examples for each, such as asking for our details or having links leading to unverified websites. When I get emails similar to those, I know how to take action on the emails in my mailbox.

Regarding user behavior, I don't find KnowBe4's real-time insights and analytics very useful because I found it a bit repetitive. Also, if you've been using the platform for a while, their modules tend to be repetitive between the different modules.

I would prefer the aspect of product repetitiveness to be improved or optimized in the next releases of KnowBe4. The renewal of the modules needs to be updated simultaneously with new threats or new content as technology is evolving quickly. I think the UI needs improvement as it appears outdated for the current website for learning modules.

Negative

Before using KnowBe4, we had an academy website from our company, but later they started sending us KnowBe4 modules. Previously, training was just in PDF or videos, and then it changed to KnowBe4.

I started using KnowBe4 because the company assigned me to do it. I understand why the company switched from the previous technology to KnowBe4 because it forces us to really see, read, and understand the materials in the modules. The old system only provided materials in a read format, whereas KnowBe4 includes quizzes and an interactive way to understand the modules better.

I'm currently working with KnowBe4 Security Awareness Training. I've been receiving the links through my email from my company. KnowBe4 is accessed through the website.

The automated assignments have a good impact for me, and possibly my colleagues feel the same because the modules assigned to us are mostly related to our work. I'm not sure if they are assigned based on departments or roles, but the modules we receive are closely related to our work.

I don't have any information about the pricing and licensing of KnowBe4 as I'm just the end user. I haven't needed to use the documentation or manuals for KnowBe4 because I can operate the system efficiently without them.

On a scale of 1-10, I rate KnowBe4 an 8.

I am not using KnowBe4 regularly. In February and March, I attended some online courses about cybersecurity and GDPR. It's the major part of cybersecurity-related topics, and my team and I attended the same course at a time.

KnowBe4 has a lot of high-quality content, and their interface is very user-friendly. The engaging simulation is good, and that is the major good part of KnowBe4. They have a good part in their progress tracking system, which I appreciate very much because when I start a course, after some time, I can see my progress, and I can take the next action or next step after seeing my progress.

Their overall experience and my experience is good, and I already mentioned some specific topics, such as their interface, their content quality, and their tracking process. I used this application and appreciate their total solution, which is why I rated it seven.

KnowBe4 has some courses that are very short, below 30 minutes. I would prefer if some content was added for a longer duration where more information would be available, and we could learn deep knowledge about this topic.

I prefer for KnowBe4 to add some new upcoming course content that is longer.

I did not face any noticeable issues with KnowBe4, but I think their content has some repeated material about the same things. Some courses have the same type of content, the same type of page. But not too much, I think some repeated content exists in multiple courses in KnowBe4.

If they make more improvements, such as improving some content, and since most of their content is paid, if they offered some more free content and also removed the repeated content or repeated topics from their list, I might increase my rating from seven to something higher.

I am a customer of KnowBe4; I was a customer.

The initial setup of KnowBe4 is adequate, and there's no need to step forward or backward. The process was very smooth, and I think in general, it's satisfactory.

KnowBe4 was really helpful to develop my skills, and that's why I used this course. I believe my skill has become more fluent and smoother, more developed after attending this type of course.

The pricing is acceptable, but when someone wants to attend this course from a third-world country, the price is high for a third-world country such as mine.

Currently, we are mainly using this product for security training for employees only. Every year we plan a new training, select training material, build guides, and deploy it to KnowBe4, and the employees get the notification for the compulsory training. They review the material, the video guides, or the pictorial representation of the material we have published. Then they get a form where they can fill out questions and answers, and finally, take a certificate.

In our trainings, we built a phishing attack scenario which we discussed in detail, and the employees, after reading the articles, implemented the fix, described the answer, and submitted it.

It is pretty much easy to use and not difficult at all.

Since this is a tool which we use for training, our employees get great benefit from it.

The main advantages are the user-friendly UI and its overall ease of use.

Since we use it for the compulsory security training only, I do not think we need any improvement in this product. However, if we were using it for broader cases, then I might have some suggestions about improvements.

For example, this product has a questions and answers section which is in text form. It could be updated to include a video game format where an employee uses the game to answer these scenarios. For instance, in a video game, we could get a phishing attack on the employee system and the employee reacts to that video game character. This would make it more attractive and understandable.

We have never felt a need to contact them, so I cannot provide any information about that.

Positive

Since the training is compulsory, I cannot say much about the user experience. If it was not compulsory, then I might have received some feedback from the users.

This product is being managed by the security team for training purposes only.

It is pretty much straightforward, as other SaaS applications.

Although I did not integrate it into the system, I know KnowBe4 gets integrated with the Okta platform quite easily.

I would rate it seven to eight out of ten.

I deploy Novo4 to customers for the benefit of security awareness training for their users. I simulate email phishing campaigns that intrigue the end user to make mistakes as far as phishing attempts go. I put in links that they're not supposed to click on. When they do, I get alerted, report on that, and send additional training on how to be more aware.

The ability to have business leadership be aware of their users' security posture as well as any kind of security awareness training being pushed by cybersecurity insurance and underwriters is valuable. It mitigates risk quite a bit for our users. I use it to educate the staff more directly on the risks of phishing attempts.

I would like to see Novo4 expand to other channels outside of emails to things such as text messages.

I have had experience with Novo4 for six months.

I think the solution is quite stable.

I just add users by entering their email addresses and send them the awareness training. It's a great solution in terms of scalability.

I find the customer service and support to be very responsive.

Neutral

I don't do the setup. I am just in sales, so I am not familiar with the setup process.

I find that it mitigates risk quite a bit for our users.

The solution is very well priced and very affordable. It's about five dollars a seat per month.

I rated the solution seven out of ten due to its ease of use, effectiveness, scalability, and cost.

I worked as an intern where KnowBe4 was used as a third-party vendor in the company.

My responsibilities included assigning security awareness training to employees, running phishing simulation campaigns, monitoring user responses, and reporting on results.

When I started, my main tasks with KnowBe4 were sending simulations and selecting which ones to use. I would also be involved with choosing the training videos and quizzes to send out to users.

KnowBe4 significantly enhanced people's awareness of cybersecurity threats within the company through its simulations that replicated real-world scenarios. The phishing simulations were very realistic and helped test actual reactions. Through these platform simulations, people became more aware of cybersecurity threats and learned how to identify potential threats.

The platform proved effective as we could track responses to repeated simulations, allowing us to measure the effectiveness of previous awareness campaigns.

KnowBe4 improved awareness as employees became more cautious with emails. They developed better habits and would report suspicious emails using the company's reporting option. As months progressed, we observed more people reporting phishing simulations, indicating increased employee awareness within the company.

The most valuable aspect of KnowBe4 was its metrics capabilities. The platform allowed us to see departmental statistics, including click rates and user responses.

The real-time insights and analytics are very detailed, enabling accurate measurement of metrics and effectiveness of phishing simulations. The platform is user-friendly with an intuitive interface, making it an excellent overall solution.

An area for improvement in KnowBe4 is the repetitive content for users completing multiple training sessions. Additionally, some email simulations were blocked by spam filters, requiring IT to whitelist these email simulations.

I worked with KnowBe4 for seven months during my time as a cybersecurity intern last year.

KnowBe4 demonstrated good scalability, particularly in supporting compliance requirements. It was valuable for audit reporting, with metrics downloadable in PDF format. The platform effectively raised awareness and reduced phishing click rates.

My involvement with technical support was limited, so I cannot provide detailed information about KnowBe4's responsiveness or helpfulness.

Neutral

I did not use any previous solutions as KnowBe4 was user-friendly.

As an intern, I was not involved in the implementation team.

The solution proved valuable for audit reporting and successfully raised awareness while reducing phishing click rates.

I was not aware of alternate solutions as this would typically fall under an admin role's responsibilities.

From my experience, KnowBe4 was stable and proves to be a strong tool for organizations building a security awareness culture. It is simple to use and effective, even for companies starting out in phishing and training campaigns. I rate this solution an 8 out of 10.

We use the solution to lower human element risk. By providing recurring security awareness training, simulated phish testing for immediate reaction training, and more, our risk is significantly lowered.

By requiring onboarding security awareness training, ongoing training, and our coupling of other layers of security, we have yet to be hit with malware or ransomware.  KnowBe4's solution plays a big role in this.

Our use case focuses on positive reinforcement and benefit and not punitive.  This has the benefit of protecting the end-user in their personal life, as well!

KnowBe4's formulas for risk reduction simply work. Being a technical company, our initial phish-prone percentage wasn't super high, but it was still around 18%.  Since we have been requiring ongoing training and simulated phish testing, our average phish-prone percentage hovers in the 0 to 3% range now. 

As a reseller, it resonates with clients and prospects when they hear we are users of the solution, as well. They understand we are not just selling it to be selling it, but we truly believe in it.

The innovative training is good. We have exposure and availability of competing solutions. NONE have the content that KnowBe4 has. Our users specifically like The Inside Man training series. They ask for more training in the form of 'When is the next season coming out? We can't wait!'

The ability to modify training is slick.

Being able to tie into SSO via SAML is fantastic!  

We hope to eventually add in PhishER and possibly SecurityCoach to provide even further risk reduction.  

Some more AI-driven automation for creating training and phishing testing campaigns, as well as automated reporting would help. The Phish Alert button could be improved, although it is understood this is due to Microsoft's constant changes.  

Any improvements in wizards and documentation are always a good thing!.

Additonal areas for improvement could be around the technical training and best practice training areas such as NIST CSF, CISv8, Cyberinsurance, and more.

Clearer whitelisting requirements are always appreciated. However, the current levels are significant and appreciated.

I have been using KnowBe4 for more than nine years.

It is very stable. It seems to always be up.

It is extremely scalable.

All interactions with tech support have been top notch.

Positive

We have only used free or open-source materials.

As long as you have knowledge or resources who can integrate with your mail solution, work with your firewalls and filters for whitelisting, etc., it is very straightforward!

We implemented it in-house.

We didn't measure ROI but the potential loss that is avoided is huge.

My advice would be to find a trusted partner and work with them. The pricing model is simple. If you have the technical staff and bandwidth, you may implement it yourself. However, if you want to get up and running more quickly, find a partner with that level of experience who has done it multiple times.

We looked at Wombat (acquired by another vendor), PhishMe (acquired by another vendor), SANS (didn't resonate with all end users), and others I can no longer recall.

Take advantage of the user conference (KB4CON) and other ongoing updates and materials.

We use the platform to provide security awareness training and conduct simulated phishing campaigns for end users. We also generate detailed reports on security metrics and trends.

The personalized content provided by KnowBe4 builds interest in learning more about security trends. We've observed a high consumption rate of security content, indicating the positive impact of KnowBe4 training on our workforce.

The product's most valuable features are the phishing campaigns and the reporting capabilities.

Enhancing the product's emotional intelligence, particularly by providing training content tailored to specific audiences, is an area for improvement. This could be achieved through systems integration with machine learning, which analyzes user behavior and click patterns. By leveraging this data, the tool could suggest targeted training topics or content to individuals based on their unique interactions and behaviors.

We have been using KnowBe4 for three years.

I rate the platform's stability a nine out of ten.

We have 1000 KnowBe4 users in our organization. It is scalable. I rate the scalability an eight and a half.

The technical support team is responsive.

Positive

We previously used a different solution, and the primary reason for switching was the cost. One of the distinct advantages of KnowBe4 is its ease of customization and administration.

The initial setup is straightforward. Depending on the expertise, one executive may be required to work on deployment. Additionally, it is a low-maintenance product. I rate the process a nine out of ten.

Based on the latest report, KnowBe4's ROI is positive, indicating that the investment in the platform yields benefits that outweigh the costs. Specifically, it helps save costs by providing specific security training for IT administrators, reducing the need for external training expenses. Additionally, the platform contributes to the overall improvement of the security culture within the organization, leading to enhanced detection capabilities and fewer phishing attempts.

I rate the product pricing as four out of ten.

KnowBe4's simulated phishing tests have significantly impacted our organization's security posture. Their customizable nature allows us to create scenarios that closely resemble real-world phishing attempts, making them highly relatable to our end users.

The platform offers several key benefits, including ease of customization, straightforward administration, seamless integration with existing systems, and robust reporting capabilities.

I rate it a nine out of ten.

I use KnowBe4 for training. I educate company staff, and as a partner of KnowBe4, I sell the subscription. I basically use some educational videos, interaction modules, and testing. Sometimes I test them with simulated phishing attacks.

There are many valuable features. It's already deployed in the cloud, and you don't have to install anything. You just upload your users to the cloud and tweak something if needed. You can whitelist some servers to work with this properly. When everything is ready, you can start using the platform and its many automated features. It has a lot of best practices to educate people. It's interesting and interactive.

It could be more localized for Ukrainian users. This platform is international, and it has a lot of material in different languages, but not in Ukrainian and Russian languages. There's plenty of different content updated regularly for English, French, and German users. They have a lot more information, and Ukrainian users also want more.

The platform is divided into two separate parts, the administrator part, and the user part. The user part is localized and is available in Ukrainian, and there's no problem using it knowing only one language. But administrative parts used by cybersecurity specialists demand English knowledge. They also have few problems with the interface. It's rather user-friendly, but it's about the quantity of localized content.

I know that they are working on artificial intelligence. I think it can be useful if AI could be used to select some modules for a more automated educational process.

I'm a KnowBe4 partner, and I have been working with them for a while. 

KnowBe4 is rather stable except for that very rare situation when it's not.

KnowBe4 is a scalable solution. I know companies with over 5000 users, and it's not a problem for them to use this platform.

There is a huge knowledge base, and they are very quick to support. Technical support is also provided at a very high level.

The initial setup is very straightforward. You only upload user emails, whitelist addresses, and there is this very quick integration with Microsoft products. Detailed instructions support everything. You can start using it in about one hour.

Licensing is paid on a yearly basis. You can go to the official site to check their approximate pricing. It's based on the number of users or staff. It can vary from country to country, but for Ukraine, it works as it's stated on the site.

There are four subscription levels, and the description tells you which level contains which feature. There are some features, but they are all bundled in subscription levels.

On a scale from one to ten, I would give KnowBe4 a ten.