“This sounds like KnowBe4 isn't properly filtering out Microsoft Defender / Safe Links bot clicks from your results. The new Outlook client is more aggressive about pre-scanning URLs, and if KB4 isn't excluding those Microsoft IP addresses from click tracking on their end, every scan registers as a "click."”
“User received a phishing test from KnowBe4, correctly identified it, and then got dinged for allegedly clicking on the link a few days later. It has only happened once in my environment, last month.”
“I've seen this before and it's often because the safe links rule isn't setup correctly so Outlook/Defender for Office is "clicking" the link to check if it's a sus link or not”
“User is showing as a click, often weeks after the message was delivered and PAB reported by the user. It seems like it may be tied to users using the new Outlook client but cannot confirm.”
“The issue with KnowBe4 isn't the training itself - it's that awareness training alone creates a false sense of security while real threats are happening in real-time across channels you're not monitoring.”
“We have run into similar frustrations with KnowBe4. One alternative we have looked at is Cybersentriq. Their campaigns adapt to user behaviour, give contextual feedback and real-time metrics let you target high-risk users rather than just spamming everyone with the same emails.”
“KnowBe4 is good for like awareness training but we want a broader coverage so we use cyber int with it to track impersonations and social media threats on the dark web. And their analyst support makes it easier for a small security team to act quickly on high-priority issues.”
“They will also sell direct and approach/poach your customers if they feel there is a churn risk. For example, if they feel the customer does not have enough phishing tests or training scheduled, they will attempt to reach out to you then your customer.”
“Im currently with KnowBe4 and id like something better (In terms of Phishing, Training, Reports and Automation). Its really not training my users for the level of real threat emails we are being challenged with.”
“From what I've seen benchmarking OutThink against these 3 bigger players, KnowBe4 has the strongest deliverability and reporting infrastructure, but can feel pretty corporate and sterile to employees. Hoxhunt takes a more gamified approach (similar to what we do) which tends to get better participation rates, especially with younger teams.”
“KnowBe4 is the standard, so popularity is always a positive. You may suffer a little because of size, not the best support for SMBs. Don't know Phished, Hoxhunt is solid, great content.”
“Agreed, but: IMO, KnowBe4 has seen better and has been gradually going downhill over the last year or so; that likely (IMO) because Vista Equity Partners acquired KnowBe4, and they are known for f$cking up every single thing they lay their hands on.”
“I don't know about he other two but KnowBe4 probably has the most extensive library of training content and extremely customizable phishing simulations. I personally manage KnowBe4 for about 175 clients.”
“We moved to Phriendly Phishing which is owned by CyberCX so not sure how they will work out long term with thekr acquisition by Accenture. Still, much better than KnowBe4 IMO”
“If you're not essentially a fresh org or only have very basic configurations and detection setups, there are a ton of issues with the product. The button "works" but it doesn't appear in the same place in every version of outlook, and I have a quarter of a million users across the region with different setups depending on their role.”
“Also, we have found that every new feature, like AI setup for building campaigns and assigning trainings is an extra (overpriced) cost. They just came out with another feature that seemed kinda cool that was a secondary spam/filtering feature was an extra cost.”
“Knowbe4 has great but longer content. We started using Artic Wolf and they send out weekly short 3-5 minute videos and I’ve had much better success getting our staff to participate watching them. They’re a little cheesy at times but the content and quality is solid.”
“We've demoed KnowBe4 and Huntress and we currently use Mimecast's Awareness Training. They all have super corny videos. I get a mention every week from people about how bad the Mimecast videos are.”