KnowBe4 is a security awareness platform delivering simulated phishing campaigns and training modules to staff. It includes one of the largest content libraries in the category, a phish-prone percentage metric for client reporting, and AI-powered features for automated remediation.
Starts at US$2.40 per user per month according to the vendor. Listing updated . Checked by MSP Software .
KnowBe4 is a human risk management platform from KnowBe4, Inc., founded in 2010 and based in Clearwater, Florida, offering simulated phishing campaigns and comprehensive security awareness training. The platform includes over 1,000 training modules in 47 languages, with AI-personalization based on user role and risk level, combining security awareness training with compliance modules and email security capabilities into a unified offering.
Its Phish-Prone Percentage metric, derived from simulated phishing campaign results, has become a standard measurement for security awareness improvement across MSP client bases and is frequently used in quarterly business reviews to demonstrate measurable progress in employee security behaviour. The platform features 60+ pre-built client-facing reports designed for non-technical executive audiences.
Pricing starts at $2.40 per user per month (USD) for organizations with 25-50 users, billed on 3-year terms, with costs decreasing for larger organizations (checked September 2026). Organizations with 1,001+ users receive custom quotes. The SAT Advanced tier begins at $3.75 per user per month and includes extended compliance modules and template libraries. The pricing includes the core security awareness training platform with phishing simulations, extensive training library, and pre-built reporting.
KnowBe4 integrates with Microsoft 365 and Google Workspace for automatic user synchronization. The PhishER Plus add-on, priced separately, provides mailbox-based email reporting and phishing email remediation for both platforms. The platform supports real-time coaching through Slack, Teams, and Google Chat, and includes AIDA (AI Defense Agents) for automated program management, real-time coaching, and personalized training assignment based on user behaviour and risk level. MSPs considering KnowBe4 should confirm which content library tier and training module categories are included at their quoted price point, and verify whether PhishER Plus for mailbox reporting is included or requires a separate subscription.
Read the Security awareness and phishing simulation buying guide
| Feature | Supported | Note |
|---|---|---|
| Phishing simulation campaigns | yes | AI-generated and personalized phishing simulations with vishing (voice phishing) included |
| Training content library | yes | Over 1,000 modules and videos in 47 languages, including games and interactive content |
| Automated remediation training | yes | AIDA provides real-time coaching and automated training assignment based on behaviour and risk level |
| Phish-reporting button | yes | Phish Alert Button for staff to report suspicious emails |
| Multi-language content | yes | Content available in 47 languages with AI personalization |
| Compliance training modules | yes | Dedicated compliance training programmes for regulatory requirements |
| Client-facing reporting | yes | 60+ built-in reports and executive dashboards including Phish-Prone Percentage metric |
| Microsoft 365 and Google user sync | yes | Automatic user synchronization with Microsoft 365 and Google Workspace |
| Smishing and vishing simulation | unknown | Vishing simulations confirmed; smishing (SMS phishing) not explicitly documented |
| Gamification | unknown | Not explicitly mentioned in documentation reviewed |
| Campaign scheduling automation | yes | Campaign scheduling and automation through AIDA |
| PSA integration for billing | unknown | Not verified from vendor documentation |
| Feature | Supported |
|---|---|
| Phishing and malware filtering | unknown |
| Spoofing and impersonation protection | unknown |
| Email continuity | unknown |
| Archiving | unknown |
| Security awareness training bundle | unknown |
| API-based post-delivery scanning | unknown |
| DMARC monitoring | unknown |
| Attachment sandboxing | unknown |
| Data loss prevention | unknown |
| Email encryption | unknown |
| Microsoft 365 integration | unknown |
| Self-service quarantine | unknown |
KnowBe4's Phish-Prone Percentage is a metric derived from simulated phishing campaign results showing the percentage of staff who failed the simulation. MSPs use it in quarterly business reviews as a trackable, measurable way to demonstrate improvement in employee security awareness over time, moving from baseline (typically around 33%) towards target levels. It requires no custom reporting and is universally understood by non-technical client contacts.
KnowBe4's core security awareness platform includes phishing simulations and training. PhishER Plus, the mailbox-based email incident response tool for detecting and removing phishing emails across Microsoft 365 and Google Workspace, is sold separately at additional per-seat costs ($1.15-$1.50 per user per month for mid-market organisations). Confirm with your KnowBe4 partner whether PhishER Plus is bundled in your quoted price or requires a separate subscription.
KnowBe4 training is available in 47 languages with AI-driven personalisation for each user. The platform supports global and multilingual organisations, though MSPs should confirm which specific language content is included at their chosen content tier (Foundation vs. Advanced) before committing to multilingual training for clients.
KnowBe4 publishes starting prices at $2.40 per user per month (USD) for 25-50 users, billed on 3-year terms as of September 2026, with volume discounts for larger organisations. For MSPs managing multiple clients, user counts must be quoted per client organisation, and the per-user rate decreases as total users increase. Confirm with a KnowBe4 partner how per-client user counts are billed and whether there are volume discounts across all your clients' combined users.
Yes, KnowBe4 integrates with both Microsoft 365 and Google Workspace for automatic user synchronisation, eliminating manual user management and keeping records in sync with your identity provider. However, mailbox-based email reporting and phishing email remediation from these services requires the separate PhishER Plus add-on, which carries an additional per-user cost and should be evaluated separately from the core platform.
Reviews are moderated. How reviews work.
Share what it is like to use this product day to day. Your experience helps other MSPs choose with confidence.
Write the first review